1111 matches found
Debian dla-4119 : lemonldap-ng - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4119 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4119-1 [email protected] https://www.debian.org/lts/security/...
BIT-DOLIBARR-2022-0174 Improper Validation of Specified Quantity in Input in dolibarr/dolibarr
Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr...
CVE-2025-1736
In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted...
SUSE-SU-2025:1056-1 Security update for python3
This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses bsc1233307...
CVE-2024-45361 Mi Connect Service APP protocol flaws lead to leaking sensitive user information
A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information...
CVE-2024-45353
CVE-2024-45353 concerns Xiaomi Quick App Framework with an intent redirection vulnerability caused by improper input validation. Affected product is Xiaomi Quick App Framework (application product). The available connected documents provide: (1) vulnerability type: intent redirection due to input...
lunary authorization issue vulnerability (CNVD-2025-07603)
lunary is lunary open source a production toolkit for LLM . An authorization issue vulnerability exists in lunary that stems from the checklists.post endpoint not being properly privilege-validated and can be exploited by an attacker to cause unauthorized creation or modification of checklists...
Bizerba GT-SoftControl 安全漏洞
Bizerba GT-SoftControl is an HMI software from Bizerba. A security vulnerability exists in Bizerba GT-SoftControl that stems from insufficient validation of the file selection process could result in unauthorized file uploads and overwrites...
CVE-2025-1320
CVE-2025-1320: teachPress WordPress plugin vulnerable to Cross-Site Forgery on Import Delete (import.php) due to missing nonce validation. Affected versions up to 9.0.9; unpatched as per sources. Attack requires user interaction via a forged request, enabling unauthenticated actors to delete impo...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
Summary When validating a request with a multipart/form-data schema, if the OpenAPI schema allows it, an attacker can upload a crafted ZIP file e.g., a ZIP bomb, causing the server to consume all available system memory. Details The root cause comes from the ZipFileBodyDecoder, which is registere...
onos-lib-go 输入验证错误漏洞
onos-lib-go is an open source library of utilities and convenience programs for developing µONOS components in Go from the µONOS Project. A security vulnerability exists in onos-lib-go version 0.10.28, which stems from an asn1/aper GetBitString that can cause an index out-of-bounds panic when...
CVE-2024-40590
An improper certificate validation vulnerability CWE-295 in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a...
Siemens SCALANCE X-200RNA Switch Devices Improper Input Validation (CVE-2016-0797)
Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service heap memory corruption or NULL pointer dereference or possibly have unspecified other impact via a long digit string that is mishandled by the 1 BNdec2bn or 2...
Siemens SCALANCE X-200RNA Switch Devices Improper Input Validation (CVE-2015-6563)
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITORREQPAMINITCTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafte...
CVE-2025-26702
Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04...
GO-2025-3475 Hermes improperly validates a JWT in github.com/hashicorp-forge/hermes
Hermes improperly validates a JWT in github.com/hashicorp-forge/hermes...
CVE-2025-23117
An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system...