CVE-2025-0448 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-0443 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-0434 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-0437 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-55577

Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user...

BELL-CVE-2025-21173

Bulletin has no description...

BELL-CVE-2025-21172

Bulletin has no description...

BELL-CVE-2025-22134

Bulletin has no description...

BELL-CVE-2024-50349

Bulletin has no description...

CGA-RPMQ-2H2M-HC99

Bulletin has no description...

CGA-MF95-8WQ4-28X9

Bulletin has no description...

CVE-2024-56374

A flaw was found in the Django framework. Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial of service attack. The undocumented and private functions cleanipv6address and isvalidipv6address were vulnerable, as was the...

GHSA-QCGG-J2X8-H9G8 vulnerabilities

Vulnerabilities for packages: awx, py3-django...

CVE-2024-47605 - XSS via insert media remote file oembed

More info at https://www.silverstripe.org/download/security-releases/cve-2024-47605...

SS-2024-002 - Reflected Cross Site Scripting (XSS) in error message

More info at https://www.silverstripe.org/download/security-releases/ss-2024-002...

GHSA-P54P-P3QM-8VGJ vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

BIT-PHP-MIN-2020-7059 OOB read in php_strip_tags_ex

When using fgetss function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash...

BIT-PHP-MIN-2020-7068 Use of freed hash key in the phar_parse_zipfile function

In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure...

BIT-PHP-MIN-2020-7071 FILTER_VALIDATE_URL accepts URLs with invalid userinfo

In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filtervar$url, FILTERVALIDATEURL, PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL and produce wrong dat...

BIT-PHP-MIN-2024-11234 Configuring a proxy in a stream context might allow for CRLF injection in URIs

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, when using streams with configured proxy and "requestfulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests...