630 matches found
CVE-2025-40308 affecting package kernel for versions less than 6.6.117.1-1
CVE-2025-40308 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...
Improper Validation of Specified Type of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the NudmSubscriberDataManagement API. An attacker can disrupt service availability by sending crafted requests to this API endpoint. Remediation Upgrade...
TencentOS Server 4: tomcat (TSSA-2025:0440)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0440 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Unverified Password Change
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Unverified Password Change via the profile update process. An attacker can gain unauthorized access to user accounts by changing the authentication password without additional verification steps. Note: This...
PT-2025-45409
Name of the Vulnerable Software and Affected Versions WP Airbnb Review Slider plugin for WordPress versions up to and including 4.2 Description The WP Airbnb Review Slider plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient URL validation allows...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in DisposalDaemon.java. In high-core environments under heavy load, the disposal thread can fall behind and allow excessive memory use. Note This issue was reported for environments...
CVE-2025-22166
This High severity DoS Denial of Service vulnerability was introduced in version 2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.3, allows an attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely...
PT-2025-43166
Name of the Vulnerable Software and Affected Versions Captcha.eu versions n/a through 1.0.61 Description A Server-Side Request Forgery SSRF vulnerability exists in Captcha.eu captcha-eu. This allows for Server Side Request Forgery. Recommendations Update Captcha.eu to a version greater than 1.0.6...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack via the IsValidWebAuthRedirectURL function. An attacker can obtain sensitive information such as Cloud API keys and OAuth client secrets by analyzing response times during authentication attempts. Remediation Upgrade...
EUVD-2020-24085
Malware in sbrugna...
EUVD-2019-7903
Malware in sbrugna...
EUVD-2021-19474
Malware in sbrugna...
EUVD-2018-3780
Malware in sbrugna...
EUVD-2019-3322
Malware in sbrugna...
EUVD-2018-13842
Malware in sbrugna...
EUVD-2016-2098
Malware in sbrugna...
EUVD-2018-3782
Malware in sbrugna...
EUVD-2021-1258
Malware in sbrugna...