CVE-2023-0148

creationtimestamp| type| source ---|---|--- 2025-03-25 18:25:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8727...

CVE-2025-27831

An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doccommon.c...

Azure Linux 3.0 Security Update: unixODBC (CVE-2024-1013)

The version of unixODBC installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1013 advisory. - An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 byte...

Important: libcap

Issue Overview: The PAM module pamcap.so of libcap configuration supports group names starting with "@", during actual parsing, configurations not starting with "@" are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potential...

CVE-2025-2712

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2025-2712 Yonyou UFIDA ERP-NC top.jsp cross site scripting

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2025-30620

CVE-2025-30620: In WordPress plugin WP Odoo Form Integrator, a Cross-Site Request Forgery (CSRF) flaw can lead to Stored XSS in the affected component. The advisory indicates the vulnerability affects WP Odoo Form Integrator versions up to 1.1.0 (no public details on root cause beyond CSRF leadin...

CVE-2025-30581

CVE-2025-30581 describes a Missing Authorization vulnerability in the WordPress plugin Top Bar (Top Bar by PluginOps), affecting versions up to and including 3.3. The issue is tied to incorrectly configured access control security levels, enabling unauthorized actions per the description. The CVE...

CVE-2025-30549

CVE-2025-30549 is a CSRF vulnerability in the WordPress plugin “Yummly Rich Recipes,” affecting versions from unknown up to 4.2. The entry documents a Cross-Site Request Forgery issue with a CVSS 3.1 base score of 4.3 (Medium). Exploitation would require user interaction, and the connected data d...

CVE-2024-11031

In version 3.83 of binary-husky/gptacademic, a Server-Side Request Forgery SSRF vulnerability exists in the MarkdownTranslate.getfilesfromeverything API. This vulnerability is exploited through the HotReloadMarkdown翻译中 plugin function, which allows downloading arbitrary web hosts by only checking...

RHEL 9 : kpatch-patch-5_14_0-503_15_1 and kpatch-patch-5_14_0-503_26_1 (RHSA-2025:3048)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3048 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module i...

CVE-2024-10366

The CVE-2024-10366 vulnerability affects danny-avila/librechat v0.7.5-rc2, where the delete-attachments endpoint does not verify that the attachment ID belongs to the current user. This IDOR allows any authenticated user (low privileges) to delete attachments of other users, with a network-style ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56601)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56601 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56593)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56593 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56785)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56785 advisory. - In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56787)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56787 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: imx8m: Probe the SoC driver as...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56595)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56595 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-...

Azure Linux 3.0 Security Update: kernel (CVE-2024-55916)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-55916 advisory. - In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56603)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56603 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: afcan: do not leave a dangling sk...

CBL Mariner 2.0 Security Update: qt5-qtbase (CVE-2023-34410)

The version of qt5-qtbase installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-34410 advisory. - An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2...