21178 matches found
RHSA-2025:16454 Red Hat Security Advisory: Red Hat Product OCP Tools 4.19 OpenShift Jenkins security update
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.18 Openshift Jenkins security update
An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.18. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 8 : Red Hat Product OCP Tools 4.12 OpenShift Jenkins (RHSA-2025:16459)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16459 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron...
CVE-2025-58002
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD bbPress Tools gd-bbpress-tools allows DOM-Based XSS.This issue affects GD bbPress Tools: from n/a through = 3.5.3...
WordPress GD bbPress Tools Plugin <= 3.5.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin GD bbPress Tools versions = 3.5.3...
CVE-2025-58002 WordPress GD bbPress Tools Plugin <= 3.5.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD bbPress Tools gd-bbpress-tools allows DOM-Based XSS.This issue affects GD bbPress Tools: from n/a through = 3.5.3...
CVE-2025-58002 WordPress GD bbPress Tools Plugin <= 3.5.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD bbPress Tools gd-bbpress-tools allows DOM-Based XSS.This issue affects GD bbPress Tools: from n/a through = 3.5.3...
CVE-2025-58002
CVE-2025-58002 affects GD bbPress Tools for WordPress (WordPress plugin). The issue is DOM-based XSS caused by improper input neutralization during web page generation, enabling cross-site scripting. Affected versions are from n/a up to 3.5.3. The CVSSv3.1 base score is 6.5 (Medium) with network ...
Malicious Package
Overview opti-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in opti-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bcfff1ad4de721407b3ce0692487bff570b6b427913b38ce128fb6e4f744c03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47490 Malicious code in opti-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bcfff1ad4de721407b3ce0692487bff570b6b427913b38ce128fb6e4f744c03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
LibTIFF 安全漏洞
LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF that stems from the ability to perform arbitrary write operations...
PT-2025-38852
Name of the Vulnerable Software and Affected Versions GD bbPress Tools versions through 3.5.3 Description The software contains a flaw related to improper input handling during web page generation, leading to a potential Cross-site Scripting XSS issue. Specifically, the issue is a DOM-Based XSS...
Microsoft Visual Studio Tools for Applications Installed (Windows)
Binary data microsoftvisualstudiotoolsforapplicationswininstalled.nbin...
WordPress plugin GD bbPress Tools 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...
Static Security Vulnerability Scanning of Proprietary and Open-Source Software: an Adaptable Process with Variants and Results
Software vulnerabilities remain a significant risk factor in achieving security objectives within software development organizations. This is especially true where either proprietary or open-source software OSS is included in the technological environment. In this paper an end-to-end process with...
sinatra
This is the official repository for the Sinatra web framework. It is a DSL Domain Specific Language for web development, allowing developers to create web applications in a concise and elegant way. The repository contains the core code for Sinatra, as well as various plugins and extensions. The...
Security Vulnerabilities in Software Supply Chain for Autonomous Vehicles
The interest in autonomous vehicles AVs for critical missions, including transportation, rescue, surveillance, reconnaissance, and mapping, is growing rapidly due to their significant safety and mobility benefits. AVs consist of complex software systems that leverage artificial intelligence AI,...
SUSE-SU-2025:03278-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...
