1994 matches found
CVE-2025-9624 OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS
A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...
CVE-2025-13644
The CVE-2025-13644 issue affects MongoDB Server and stems from an invariant failure during batched delete operations. The server may misinterpret a batch as containing multiple documents when the document size exceeds BSONObjMaxSize, leading to incorrect handling of the batch. Affected versions i...
PT-2025-48080
Name of the Vulnerable Software and Affected Versions OpenSearch versions prior to 3.2.0 Description A flaw exists in OpenSearch that enables attackers to trigger a Denial of Service DoS condition. This is achieved by providing complex query string inputs. Recommendations Update to version 3.2.0 ...
CVE-2025-47913 affecting package packer for versions less than 1.9.5-11
CVE-2025-47913 affecting package packer for versions less than 1.9.5-11. A patched version of the package is available...
AZL-71102 CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-4
Fluent Bit inhttp, insplunk, and inelasticsearch input plugins fail to sanitize tagkey inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tagkey values containing special characters such as newlines or ../ that are treated as valid tags...
AZL-71111 CVE-2025-12970 affecting package fluent-bit for versions less than 3.1.10-2
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
firefox: thunderbird: Same-origin policy bypass in the DOM: Workers component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Workers component...
Exploit for Improperly Implemented Security Check for Standard in Fortinet Fortiproxy
watchTowr-vs-Fortiweb-AuthBypass Detection Artifact Generator...
WordPress YITH WooCommerce Wishlist plugin <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename vulnerability
Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin YITH WooCommerce Wishlist versions = 4.10.0...
AZL-70667 CVE-2025-10158 affecting package rsync for versions less than 3.4.1-2
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...
CVE-2025-8677 affecting package bind for versions less than 9.16.50-3
CVE-2025-8677 affecting package bind for versions less than 9.16.50-3. A patched version of the package is available...
CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13
CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13. A patched version of the package is available...
CVE-2025-40936
A vulnerability has been identified in PS/IGES Parasolid Translator Component All versions V29.0.258, Simcenter Femap All versions V2512.0003, Solid Edge All versions V226.00 Update 03. The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS file...
CVE-2025-39853 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39853 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-40051 affecting package kernel for versions less than 6.6.112.1-2
CVE-2025-40051 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-37931 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-37931 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-39863 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39863 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-23143 affecting package kernel for versions less than 6.6.112.1-2
CVE-2025-23143 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-40068 affecting package kernel for versions less than 6.6.112.1-2
CVE-2025-40068 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...