13092 matches found
MINI-275M-PX9M-RM3F
Bulletin has no description...
WordPress Electrician - Electrical Service WordPress Theme <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Electrician - Electrical Service WordPress Type Theme Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31055 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c51b2442e459 Credits Tran Nguye...
MINI-9HC9-2FP5-GRRQ
Bulletin has no description...
MINI-9FMJ-4G6V-HJHW
Bulletin has no description...
MINI-3M2G-RH76-6767
Bulletin has no description...
MAL-2025-5636 Malicious code in ass-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9179dab2c24e4e6a26ba920c58d4c057745bfaf4cf851a377864974a3fdfd1a The OpenSSF Package Analysis project identified 'ass-frontend' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6565 Malicious code in pipmodule83 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 95b01ea01a7fd1ff5e52491e6b143aa98f45a6f331814222fe38e76ad3ac0863 If run as a module, the package downloads and executes a remote script. At the time of check, the remote script was just opening a popup; thus it's not...
BELL-CVE-2025-38193
Bulletin has no description...
BELL-CVE-2025-38202
Bulletin has no description...
GHSA-287X-9RFF-QVCG Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header
The web-push crate before 0.10.4 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header. The patch was initially made available in version 0.10.3, but version 0.10.3 has since been yanked...
CGA-VG9J-GG9X-C9F4
Bulletin has no description...
CGA-V9R4-PPCG-99FX
Bulletin has no description...
CGA-M4WC-HW2P-2HC9
Bulletin has no description...
CGA-HPGR-5XGP-2PJQ
Bulletin has no description...
CGA-84W6-CH65-CPQQ
Bulletin has no description...
CGA-32VJ-CFQW-Q62G
Bulletin has no description...
CGA-C2R7-2566-PWM6
Bulletin has no description...
CVE-2025-38201 netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: clamp maximum map bucket size to INTMAX Otherwise, it is possible to hit WARNONONCE in kvmallocnodenoprof when resizing hashtable because GFPNOWARN is unset. Similar to: b541ba7d1f5a "netfilter: conntrack...
CVE-2025-38200 i40e: fix MMIO write access to an invalid page in i40e_clear_hw
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...