459 matches found
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: crossplane-provider-sql, chartmuseum, crossplane-provider-azure-storage, tw, gitsign, kubecolor, kubernetes-csi-external-provisioner, crossplane-provider-azure-managedidentity, k8ssandra-client, rancher-system-upgrade-controller, guac, libnvidia-container,...
GHSA-H355-32PF-P2XM vulnerabilities
Vulnerabilities for packages: crossplane-provider-sql, chartmuseum, crossplane-provider-azure-storage, gitsign, kubernetes-csi-external-provisioner, crossplane-provider-azure-managedidentity, k8ssandra-client, rancher-system-upgrade-controller, guac, libnvidia-container,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: direnv, kafkaexporter, wuzz, oauth2-proxy-fips, longhorn-instance-manager, metallb-fips, cass-operator, custom-pod-autoscaler-operator-fips, sftpgo-plugin-eventsearch, trust-manager, portieris, chart-testing-fips, knative-eventing, rootlesskit-fips,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: direnv, kafkaexporter, wuzz, oauth2-proxy-fips, longhorn-instance-manager, metallb-fips, cass-operator, custom-pod-autoscaler-operator-fips, sftpgo-plugin-eventsearch, trust-manager, portieris, chart-testing-fips, knative-eventing, rootlesskit-fips,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: direnv, kafkaexporter, wuzz, oauth2-proxy-fips, longhorn-instance-manager, cass-operator, custom-pod-autoscaler-operator-fips, sftpgo-plugin-eventsearch, portieris, chart-testing-fips, knative-eventing, rootlesskit-fips, crossplane-provider-aws-firehose,...
CLEANSTART-2026-UM63521 Within HostnameError
Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...
CVE-2025-23856
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Odyno Simple Vertical Timeline simple-vertical-timeline allows DOM-Based XSS.This issue affects Simple Vertical Timeline: from n/a through = 0.1...
CVE-2017-18826
Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...
CVE-2017-18837
Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...
CVE-2017-18830
Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...
[SECURITY] Fedora 43 Update: python-pdfminer-20251230-1.fc43
Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...
Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege Escalation
Description The application's session management is vulnerable to Authorization Bypass and Vertical Privilege Escalation. During dynamic analysis of the application's authentication flow, I discovered that the JSON Web Tokens JWT are signed with a weak secret key. This allowed me to perform an...
CVE-2023-53806
CVE-2023-53806 pertains to the Linux kernel and affects the DRM AMD display driver. The root cause is an out-of-bounds access when the driver populates subvp information for multiple pipes using vblank, which could trigger a page fault. The fix restricted subvp cmd info population to only the top...
EUVD-2025-117005
Malicious code in vertical-crimson-firefly npm...
MAL-2025-139097 Malicious code in vertical-crimson-firefly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c74559c3b3550fcaf2e322a771a25d136c04e8e12f1335706771da8036c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vertical-crimson-firefly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c74559c3b3550fcaf2e322a771a25d136c04e8e12f1335706771da8036c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100949
Malicious code in verticalpythonz3n npm...
MAL-2025-123989 Malicious code in vertical_booby_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6027cb201b1d67e88887a6468ec03658614337404b3acab66397167b4faee78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...