352 matches found
EUVD-2025-202169
JDA Java Discord API downloads external URLs when updating message components...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.83 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.83 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
AFLGopher: Accelerating Directed Fuzzing Via Feasibility-Aware Guidance
Directed fuzzing is a useful testing technique that aims to efficiently reach target code sites in a program. The core of directed fuzzing is the guiding mechanism that directs the fuzzing to the specified target. A general guiding mechanism adopted in existing directed fuzzers is to calculate th...
kernel: NFS: Fix a race when updating an existing write
A flaw use after free in the Linux kernel NFS functionality was found in the way connected user sends malicious data to the server. A remote user could use this flaw to crash the system...
EUVD-2009-0486
Malware in sbrugna...
EUVD-2019-14618
Malware in sbrugna...
loop: Avoid updating block size under exclusive owner
...
Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.10 packages update
Red Hat OpenShift Container Platform release 4.19.10 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...
CVE-2025-51472
Code Injection in AgentTemplate.evalagentconfig in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via malicious values in agent template configurations such as the goal, constraints, or instruction field, which are evaluated using eval without validati...
PT-2025-29710 · Unknown +1 · Woocommerce +1
Name of the Vulnerable Software and Affected Versions: Counter live visitors for WooCommerce plugin for WordPress versions up to and including 1.3.6 Description: The Counter live visitors for WooCommerce plugin for WordPress is susceptible to arbitrary file deletion due to inadequate file path...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the session management API due to a missing permission check. An attacker can impersonate other users and access sensitive resources by updating sessions if they know the session ID. Remediation Upgrade...
Description of the security update for SharePoint Server 2019 Language Pack: July 8, 2025 (KB5002739)
None None...
Clam AntiVirus Toolkit 1.4.3
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...
CVE-2020-9138
There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exceptions during updating...
CVE-2023-2334
The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a...
WordPress plugin illi Link Party 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-21014 · Adobe · Photoshop
Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 26.5, 25.12.2 and earlier Description: The issue is related to an Integer Overflow or Wraparound that could result in arbitrary code execution in the context of the current user. Exploitation requires user...
WordPress Checkout Mestres do WP for WooCommerce 8.7.5 Missing Authentication
WordPress Checkout Mestres do WP for WooCommerce plugin versions 8.6.5 through 8.7.5 suffer from a missing authentication vulnerability that allows you to update options...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from Unrestricted creation and updating of bookmarks in archive channels, which allows authenticated users to create or update bookmarks in...