13120 matches found
GO-2025-3811 File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing in github.com/filebrowser/filebrowser
File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing in github.com/filebrowser/filebrowser...
GO-2025-3767 OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr
OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr...
CGA-QF7C-6346-2GF6
Bulletin has no description...
MAL-2025-6738 Malicious code in nio4r (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6780 Malicious code in wbcm (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6766 Malicious code in tdesign-flutter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6763 Malicious code in spot-tasks (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6743 Malicious code in nova-node-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6771 Malicious code in tidb-lightning-web (npm)
The package communicates with a domain associated with malicious activity...
CGA-GXCJ-JJ66-MXG7
Bulletin has no description...
CGA-6744-388X-QM8Q
Bulletin has no description...
MINI-RF5G-R7W9-RJ8R
Bulletin has no description...
MINI-GGWF-XC87-JQ5V
Bulletin has no description...
CVE-2025-6918 SQLi in Ncvav's Virtual PBX Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...
MINI-3CGQ-W4X4-G3W9
Bulletin has no description...
MINI-VPJQ-WPQ4-CMF3
Bulletin has no description...
MINI-3J55-4WVX-94XR
Bulletin has no description...
CVE-2025-8267
Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery SSRF due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 Multicast as invalid. This oversight allows attackers to craf...
ALSA-2025:11992 Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...