13090 matches found
CGA-FQJP-GQGV-CHRP
Bulletin has no description...
CGA-72PF-VRM4-5RXH
Bulletin has no description...
CGA-576G-JV9M-GR4C
Bulletin has no description...
CGA-7F4H-7PH7-8W8M
Bulletin has no description...
CGA-5MF4-9QX3-Q7G3
Bulletin has no description...
CGA-G8QQ-FHQ3-2J3R
Bulletin has no description...
Account Takeover
Socialstream is vulnerable to Account Takeover. The vulnerability is due to the lack of a confirmation step when linking social accounts and the potential use of -stateless in the Socialite configuration, which allows an attacker to link a social account to an authenticated user’s account without...
CVE-2025-21613
An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport...
GHSA-R9PX-M959-CXF4 vulnerabilities
Vulnerabilities for packages: osv-scanner, snyk-cli, argo-workflows, k8sgpt, goreleaser, argo-events, melange, timoni, trivy-fips, flux-kustomize-controller-fips, packer-fips, argocd-image-updater, apko, flux, tfsec, go-licenses, guac, kyverno, dagger, pulumi, kaniko, bom, scorecard, argo-cd,...
CVE-2025-21604 LangChain4j-AIDeepin Using MD5 to Hash files may cause file upload conflicts
LangChain4j-AIDeepin is a Retrieval enhancement generation RAG project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0...
CGA-3QGW-PHCC-2FH2
Bulletin has no description...
CVE-2024-20148
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID:...
CVE-2024-35498
A cross-site scripting XSS vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CGA-Q6F8-VM4G-CH7G
Bulletin has no description...
CGA-P9V5-JPJ2-Q3WW
Bulletin has no description...
OPENSUSE-SU-2025:14617-1 rizin-0.7.4-1.1 on GA media
These are all security issues fixed in the rizin-0.7.4-1.1 package on the GA media of openSUSE Tumbleweed...
CGA-W9XM-MHPF-8RW7
Bulletin has no description...
CVE-2024-56332 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
MAL-2025-17 Malicious code in facetec-browser-sdk (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f356209be66b9759fe0891f0751be720e7d758d002e5fd1541f0c10619f45c Any computer that has this package install...
