248908 matches found
ROOT-OS-DEBIAN-11-CVE-2025-38369 CVE-2025-38369 in linux - Patched by Root
Root has patched CVE-2025-38369 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-37842 CVE-2025-37842 in linux - Patched by Root
Root has patched CVE-2025-37842 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-53393 CVE-2023-53393 in linux - Patched by Root
Root has patched CVE-2023-53393 in the linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-18896
A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...
EUVD-2026-53020
A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...
CVE-2026-18896
The CVE-2026-18896 entry concerns lavkush-maurya Student-Registration-System 1.0. The vulnerable component is an unknown function in /student/changepass.php, where manipulating the oldpass parameter enables SQL injection. This vulnerability is described as exploitable remotely and publicly disclo...
CVE-2026-18896 lavkush-maurya Student-Registration-System changepass.php sql injection
A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...
Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d969f292b82b34df445017d86910903f577428c88bd312736ef2c03f9381e4f On require of the package's main entry, compat.js runs as a side effect: it selects a per-platform payload, fetches a native binary over HTTPS from o...
CVE-2026-18856
A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFile of the file modules/importer/importer.admin.controller.php of the component Data Import Module. This manipulation of the argument filename causes server-side request forgery...
CVE-2026-18856
CVE-2026-18856 affects Poesis Rhymix CMS up to version 2.1.33. The vulnerability resides in the function procImporterAdminCheckXmlFile (modules/importer/importer.admin.controller.php) and enables server-side request forgery via manipulation of the filename argument. Exploitation can be remote; th...
RXSA-2026:49857 Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux SIG Cloud8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:Roc...
Exposure of System-scoped credentials in horreum
horreum 0.16.162.v33b4aab5f828 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to have Jenkins send credentials they are not...
Photon OS 5.0: Squid PHSA-2023-5.0-91-0154
An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0154. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exposure of System-scoped credentials in google-chat-notification
google-chat-notification 166.ve6bde280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and capture credentials...
CVE-2026-51401
A flaw was found in Vim. A local attacker could exploit a vulnerability in the vmsfixfilename function, allowing them to execute arbitrary code on the system. This could lead to a complete compromise of the affected system. Mitigation No mitigation is required. Red Hat does not ship any product...
MAL-2026-11540 Malicious code in hubert-application-get-document-preview-am (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e887ef3c3509ebfe43d231ff354e4e0d7f8eb20c9da05389324446d44fc589 On require of the package, index.js loads setup.js which selects a platform key, downloads a native binary from one of four hardcoded workers.dev...
Malicious code in osinthell (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458757b4c185e84321b45bd7fec158459300d68106826e5774df2399818c7916 The package's only exported function, sorgu, invokes 26 sibling modules under public/a/b/.../z/ that carry out an immediate, irreversible destructive...
CVE-2026-66902
Google::Auth versions before 0.06 for Perl run a command named in an externalaccount credentials JSON via an ungated system call. The Pluggable subclass reads credentialsource.executable.command from the credentials JSON and runs it as system$command, a single argument call that passes the whole...