4180 matches found
CVE-2023-41528
creationtimestamp| type| source ---|---|--- 2025-08-07 21:59:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtqdcghnl2e...
DEBIAN-CVE-2025-8579
Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Linux Distros Unpatched Vulnerability : CVE-2022-49565
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trac...
SUSE CVE-2025-8577
Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
From Split to Share: Private Inference with Distributed Feature Sharing
Cloud-based Machine Learning as a Service MLaaS raises serious privacy concerns when handling sensitive client data. Existing Private Inference PI methods face a fundamental trade-off between privacy and efficiency: cryptographic approaches offer strong protection but incur high computational...
sqlite: Integer Truncation in SQLite
A memory corruption flaw was found in SQLite. Under specific conditions a query can be generated where the number of aggregate terms could exceed the number of columns available. This issue could lead to memory corruption and subsequent unintended behavior...
PT-2026-7646
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45 Description An issue exists in the File input functionality of Google Chrome that could allow a remote attacker to perform UI spoofing. This is possible if the attacker convinces a user to perform...
PT-2025-31255 · Ibm · Db2 Connect Server +1
Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5.0.0 through 10.5.0.11 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1.0 through 11.1.4.7 IBM Db2 for Linux, UNIX and Windows includes...
IBM Db2 for Linux 安全漏洞
IBM Db2 for Linux is a relational database management system developed by IBM and designed for the Linux operating system to provide high-performance, highly reliable data storage and management services. A denial of service vulnerability exists in IBM DB2 for Linux, which can be exploited by an...
CVE-2025-34136 Commvault CommServe Web Server Unauthenticated SQL Injection
An SQL injection vulnerability exists in Commvault 11.32.0 - 11.32.93, 11.36.0 - 11.36.51, and 11.38.0 - 11.38.19 Web Server component that allows a remote, unauthenticated attacker to perform SQL Injection. The vulnerability impacts systems where the CommServe and Web Server roles are installed...
CVE-2025-8107
In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected...
RHSA-2023:7370
creationtimestamp| type| source ---|---|--- 2025-07-23 19:38:05+00:00| seen| Telegram/7dqI0T7UDX-m5iuSwEoYuCcQjqNmKpc0btwU4cyV1G7Uc 2025-08-01 16:44:58+00:00| seen| Telegram/bcIbeCc6uOaGrdM5LOW5-5tLNmTviix1Z-9QPl2cq16iU8c 2025-08-01 16:44:59+00:00| seen|...
CVE-2025-54090
A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue...
GHSA-F7H5-C625-3795 Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
In Eclipse GlassFish version 6.2.5, it is possible to perform a Server Side Request Forgery attack using specific endpoints...
World-Writable NLTK Cache Directory Enables Local Users to Tamper with or Delete NLP Data
Description The llamaindex library sets the NLTK data directory to a subdirectory of the codebase by default e.g., static/nltkcache inside the package directory. In multi-user environments or shared hosting, this directory is world-writable or accessible by multiple users. As a result, any user c...
PT-2025-29634
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A difficult-to-exploit issue exists in the MySQL Client component mysqldump of Oracle MySQL. Successful...
CVE-2025-30661
An Incorrect Permission Assignment for Critical Resource vulnerability in line card script processing of Juniper Networks Junos OS allows a local, low-privileged user to install scripts to be executed as root, leading to privilege escalation. A local user with access to the local file system can...
CVE-2025-52981 Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash
An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX1600, SRX2300, SRX 4000 Series, and SRX5000 Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If a sequen...
MH-FSF: a Unified Framework for Overcoming Benchmarking and Reproducibility Limitations in Feature Selection Evaluation
Feature selection is vital for building effective predictive models, as it reduces dimensionality and emphasizes key features. However, current research often suffers from limited benchmarking and reliance on proprietary datasets. This severely hinders reproducibility and can negatively impact...