4789 matches found
PT-2025-37616
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the network block device nbd module. A hung task can occur when a signal interrupts the nbd start device ioctl function while it is waiting for ...
CLSA-2025-1757699919 ruby: Fix of CVE-2016-2338
CVE-2016-2338: fix heap overflow vulnerability in startdocument function...
CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting
In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...
CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting
In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...
CVE-2025-34174
The CVE affects pfSense CE in the Status Traffic Totals feature: /usr/local/www/status_traffic_totals.php processes the start-day parameter. The parameter is not validated as numeric nor sanitized for HTML, allowing the value to be saved as the default display for all users, which triggers stored...
CVE-2025-34174 Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting
In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...
Netgate pfSense CE 安全漏洞
Netgate pfSense CE is a FreeBSD-based open source firewall and routing platform from Netgate, Inc. that supports enterprise-class network security and network management features. A security vulnerability exists in Netgate pfSense CE that stems from the start-day parameter not validating as a...
PT-2025-36941
Name of the Vulnerable Software and Affected Versions: pfSense CE affected versions not specified Description: The start-day parameter in /usr/local/www/status traffic totals.php does not undergo proper validation to ensure it is a numeric value or sanitized of HTML-related characters before bein...
CVE-2025-10099 Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting
A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarusuariocad.php of the component Editar usuário Page. This manipulation of the argument email/datainicial/dataexpiracao causes cross site...
CVE-2025-32333
In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-6785
Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to control remote start functions of the vehicle. Testing completed on Tesla Model 3 vehicles with software version v11.1 2023.20.9 ee6de92ddac5...
MAL-2025-44395 Malicious code in geodynamo-start-umbra-abiogenesis (npm)
The package geodynamo-start-umbra-abiogenesis was found to contain malicious code...
MAL-2025-46140 Malicious code in start-less-loader-got-sirius (npm)
The package start-less-loader-got-sirius was found to contain malicious code...
Malicious code in start-less-loader-got-sirius (npm)
The package start-less-loader-got-sirius was found to contain malicious code...
Malicious code in cygnus-uninstall-prettier-stylelint-start (npm)
The package cygnus-uninstall-prettier-stylelint-start was found to contain malicious code...
MAL-2025-46141 Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...
Malicious code in geodynamo-start-umbra-abiogenesis (npm)
The package geodynamo-start-umbra-abiogenesis was found to contain malicious code...
Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...