16955 matches found
CVE-2025-20088 Insufficient Input Validation on Post Props
Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...
CVE-2024-57844
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...
CVE-2024-57887 drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533attachdsi The hostnode pointer was assigned and freed in adv7533parsedt, and later, adv7533attachdsi uses the same. Fix this use-after-free issue by dropping ofnodeput in adv7533parsedt...
RHSA-2025:0324 Red Hat Security Advisory: rsync security update
Bulletin has no description...
BELL-CVE-2024-12087
Bulletin has no description...
BELL-CVE-2024-12086
Bulletin has no description...
Denial Of Service (DoS)
org.keycloak, keycloak-quarkus-server is vulnerable to Denial Of Service DoS. The vulnerability is due to insufficient input validation in the processing of security headers, allowing improperly formatted input such as newlines to disrupt server operations...
CVE-2024-57727
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...
CVE-2024-57727
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...
PT-2025-1274
Name of the Vulnerable Software and Affected Versions SimpleHelp remote support software versions 5.5.7 and before Description The issue allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file, also known as a zip slip. This can be exploited to...
CVE-2025-21129
CVE-2025-21129 concerns Adobe Substance3D Stager before or at version 3.0.4, affected by a Heap-based Buffer Overflow that can enable arbitrary code execution in the current user’s context. Exploitation requires user interaction, specifically opening a malicious file. Public references in connect...
Mediawiki - DataTransfer Extension Cross-Site Request Forgery (CSRF) and Cross-site Scripting (XSS)
Cross-Site Request Forgery CSRF, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Cross Site Request Forgery, Cross-Site Scripting XSS.This issue affects Mediawiki - DataTransf...
DEBIAN-CVE-2025-21311
Windows NTLM V1 Elevation of Privilege Vulnerability...
CVE-2025-21302
Windows Telephony Service Remote Code Execution Vulnerability...
CVE-2024-7344
Howyar UEFI Application "Reloader" 32-bit and 64-bit is vulnerable to execution of unsigned software in a hardcoded path...
CVE-2024-7344
Public documents provided do not include detailed technical information for CVE-2024-7344 (Howyar UEFI Reloader). No vendor advisories with root cause, impact, or remediation are present here. Monitor sources for updates.
CVE-2024-57650
An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
MAL-2025-100 Malicious code in reqests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42036342744aae89af66ec705147456c19ef5f7f242f7d91251ca0bac5fe12ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is If your current version is 2.46.x 2.46.184.25013, 2.47.x 2.47.126.25010, 2.48.x 2.48.164.25010, 2.49.x 2.49.182.25010, 2.50.x 2.50.139.25010, 2.51.x 2.51.349.24355, or 2.52.x 2.52.62.25009. It is, therefor...