278149 matches found
CGA-C2WR-WCRX-X9FJ
Bulletin has no description...
CGA-6CV3-2W4X-PR67
Bulletin has no description...
MAL-2025-49390 Malicious code in payments-notifications (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2ff3c7a16e539813080b53ccec2b3531078fed7382156c676025c1188b9c7c The package payments-notifications was found to contain malicious code. Source: ossf-package-analysis...
DEBIAN-CVE-2025-7700
A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...
CVE-2025-63717
The change password functionality at /petgrooming/admin/changepass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers...
CGA-V9WP-CQ3J-8PH6
Bulletin has no description...
EUVD-2025-38282
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...
K000157317: BIND vulnerability CVE-2025-8677
Security Advisory Description Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and...
EUVD-2025-38319
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
MINI-FWRW-XXHC-7H2W
Bulletin has no description...
MINI-6467-7QP7-QHQH
Bulletin has no description...
MINI-MFJF-RJJ4-V6W5
Bulletin has no description...
MINI-8PG2-GFGX-24RM
Bulletin has no description...
MINI-MCMM-GJ9Q-99XG
Bulletin has no description...
MINI-FHVR-P56F-G98W
Bulletin has no description...
MINI-7WRP-5JQ2-6687
Bulletin has no description...
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Information Disclosure (217222)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the information disclosure vulnerability 217222 Vulnerability Details IBM X-Force ID: 217222 DESCRIPTION: Apache commons-dbcp could allow a remote authenticated attacker from within the local network to obtain...
CVE-2025-58463
CVE-2025-58463 affects QNAP Download Station and is a relative path traversal vulnerability. The issue can be exploited by a remote attacker who has an administrator account to read contents of unexpected files or system data. The vulnerability is triggered via a path traversal flaw in the downlo...