12577 matches found
CVE-2025-52893 OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. Th...
MGASA-2025-0195 Updated nss & firefox packages fix security vulnerabilities
CVE-2025-5263: Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. CVE-2025-5264: Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this...
RHSA-2025:9605 Red Hat Security Advisory: perl-File-Find-Rule security update
Bulletin has no description...
RHSA-2025:9569 Red Hat Security Advisory: gimp:2.8 security update
Bulletin has no description...
RHSA-2025:9526 Red Hat Security Advisory: pam security update
Bulletin has no description...
RHSA-2025:9517 Red Hat Security Advisory: perl-File-Find-Rule security update
Bulletin has no description...
RHSA-2025:9514 Red Hat Security Advisory: rhc security update
Bulletin has no description...
RHSA-2025:9462 Red Hat Security Advisory: qt5-qtbase security update
Bulletin has no description...
SUSE-SU-2025:02098-1 Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-15030059198 fixes one issue. The following security issue was fixed: - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream bsc1238730...
Pioneer DMH-WT7600NEX 数据伪造问题漏洞
The Pioneer DMH-WT7600NEX is a multimedia digital media receiver from Pioneer. The Pioneer DMH-WT7600NEX suffers from a Data Forgery Issue vulnerability that stems from insufficient validation of software updates and could lead to the execution of arbitrary code...
PT-2025-26865
Name of the Vulnerable Software and Affected Versions: OpenBao versions prior to 2.3.0 Description: The issue concerns the potential leak of sensitive information in logs when processing malformed data. This problem has been identified in OpenBao, a software solution designed to manage, store, an...
PT-2025-26842 · Unknown · Tuleap Community Edition +1
Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 16.8.99.1749830289 Tuleap Enterprise Edition versions prior to 16.9-1 Description: The issue is a cross-site request forgery vulnerability that could be exploited by an attacker to trick victims into...
WordPress Elessi Theme <= 6.3.9 is vulnerable to Cross Site Scripting (XSS)
Software Elessi Type Theme Vulnerable versions = 6.3.9 Fixed in 6.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-49873 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 21ece639e9c8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...
PT-2025-26818 · Unknown +1 · Mountain Duck +1
Name of the Vulnerable Software and Affected Versions: Cyberduck versions through 9.1.6 Mountain Duck versions through 4.17.5 Description: The issue is related to improper handling of TLS certificate pinning for untrusted certificates, such as self-signed certificates, in Cyberduck and Mountain...
PT-2025-26855 · Microsens · Microsens Nmp Web+
Name of the Vulnerable Software and Affected Versions: MICROSENS NMP Web+ versions prior to 3.3.0 Description: The issue allows an unauthenticated attacker to generate forged JSON Web Tokens JWT to bypass authentication. This could potentially lead to full system control. Organizations worldwide...
PT-2025-26938 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.2 through 17.11.4 GitLab CE/EE versions 18.0 through 18.0.2 GitLab CE/EE versions 18.1 through 18.1.0 Description: An issue has been discovered that could have allowed authenticated users with Guest role permissions t...
CVE-2025-52884 risc0-ethereum-contracts allows invalid commitment with digest value of zero to be accepted by Steel.validateCommitment
RISC Zero is a zero-knowledge verifiable general computing platform, with Ethereum integration. The risc0-ethereum repository contains Solidity verifier contracts, Steel EVM view call library, and supporting code. Prior to versions 2.1.1 and 2.2.0, the Steel.validateCommitment Solidity library...
RHSA-2025:9490 Red Hat Security Advisory: kernel security update
Bulletin has no description...