16955 matches found
CVE-2025-0314 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting...
Unspecified Vulnerability in Magma (CNVD-2025-15071)
Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a security vulnerability that can be exploited by an attacker to cause a denial of service by repeatedly crashing the M...
PT-2025-5514 · Unknown · G5Theme Essential Real Estate
Name of the Vulnerable Software and Affected Versions: G5Theme Essential Real Estate versions 5.1.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 5.1.8 and...
PT-2025-5451 · Pickplugins · Pickplugins Job Board Manager
Name of the Vulnerable Software and Affected Versions: PickPlugins Job Board Manager versions 2.1.59 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the PickPlugins Job Board Manager, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For...
CVE-2024-55194
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h...
CVE-2024-55195
An allocation-size-too-big bug in the component /imagebuf.cpp of OpenImageIO v3.1.0.0dev may cause a Denial of Service DoS when the program to requests to allocate too much space...
BELL-CVE-2025-21664
Bulletin has no description...
BELL-CVE-2025-21663
Bulletin has no description...
BELL-CVE-2025-23083
Bulletin has no description...
BELL-CVE-2025-21490
Bulletin has no description...
BELL-CVE-2025-0395
Bulletin has no description...
Server Side Request Forgery (SSRF)
github.com/t2bot/matrix-media-repo is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to MMR serving content from a private network it can access, under certain conditions, allows attackers to potentially access internal resources that would otherwise be protected...
PT-2025-31999 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 9.8-rc-1 through 16.4.6 XWiki Platform versions 16.5.0-rc-1 through 16.10.4 XWiki Platform versions 17.0.0-rc-1 through 17.1.0 Description: XWiki Platform Legacy Old Core and XWiki Platform Old Core allows any user wit...
CVE-2024-57720
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...
CVE-2024-55192
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIOv310::farmhash::inlined::Fetch64char const...
Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL
An extension point in Jenkins allows selectively disabling cross-site request forgery CSRF protection for specific URLs. Bitbucket Server Integration Plugin implements this extension point to support OAuth 1.0 authentication. In Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusi...
CVE-2025-24398
Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...
CVE-2025-0650
A flaw was found in the Open Virtual Network OVN. Specially crafted UDP packets may bypass egress access control lists ACLs in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized...