44264 matches found
ROS-20260129-73-0066
Vulnerability in curl related to url redirection to an untrusted site. Exploitation of the vulnerability could allow an attacker acting remotely to redirect a user to an arbitrary url address...
CVE-2025-7014: Session Fixation
Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
ROS-20260129-73-0018
A vulnerability in the GEGL image processing library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information and cause denial of service...
CVE-2025-7013: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2025-64751 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-22796 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2025-68160 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-0531 vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-G37R-X966-X536 vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-Q9RJ-XVG6-V42W vulnerabilities
Vulnerabilities for packages: kibana...
CVE-2025-37732 vulnerabilities
Vulnerabilities for packages: kibana...
CVE-2025-37734 vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-P2G6-3QPG-4V6H vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-XH25-GX5F-4HQG vulnerabilities
Vulnerabilities for packages: kibana...
CVE-2022-40619
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsqaccesstoken parameter. This affects R6230 before...
CVE-2022-40619
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsqaccesstoken parameter. This affects R6230 before...
Malicious code in chai-px (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeac68ac3a89859c0a6c38e5d55e4e2e9b9ffa77476a10cdc1d31de070bea68 The package chai-px was found to contain malicious code. Source: ghsa-malware 708ec6326dbafd483773c64035513b5cd8be0a0842c3d44d92af9eee01408b8a Any...
Malicious code in skndkjasndkjan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db684638c7c4cc14bc030fa38952c5a81da5ae4fbfc4d8a7279f52096db4299 The package skndkjasndkjan was found to contain malicious code. Source: ghsa-malware b3faa645d3b9d269340718ff8ee7b86fa018985ce3748a7619a156fbec8fce44...