3731 matches found
ca.qc.ircm:plate-layout (=0.8), com.github.ilgun:expandingtextarea (=2.0) +100 more potentially affected by CVE-2025-9467 via com.vaadin:vaadin-server (>=8.0.0 <=8.28.1)
com.vaadin:vaadin-server MAVEN version =8.0.0, =1.0.0, =1.0.0, =1.1.20, =1.1.8, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.5 and more Source cves: CVE-2025-9467 Source advisory: OSV:GHSA-9GFH-4FWJ-W3RJ...
@_sh/strapi-plugin-ckeditor (>=5.0.0 <=6.0.1), @abcxyz123321555/ckeditor5-build-test-version (>=0.7.0 <=0.10.2) +131 more potentially affected by CVE-2025-58064 via ckeditor5 (>=44.2.0 <=45.2.1)
ckeditor5 NPM version =44.2.0, =5.0.0, =0.7.0, =0.0.2, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.2.0, =44.3.0-alpha.7 and more Source cves: CVE-2025-58064 Source advisory: OSV:GHSA-X9GP-VJH6-3WV6...
Important: Red Hat Security Advisory: pam security update
An update for pam is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Linux Distros Unpatched Vulnerability : CVE-2022-23498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including...
Linux Distros Unpatched Vulnerability : CVE-2021-46044
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service context-dependent. CVE-2021-46044 Note that...
Linux Distros Unpatched Vulnerability : CVE-2020-13340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log CVE-2020-13340 Note that Nessus reli...
AZL-73244 CVE-2025-58160 affecting package rpm-ostree for versions less than 2022.1-8
tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into...
USN-7721-1 linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PA-RISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x...
@10xsai/cloudflare-router-nx-plugin (=1.0.0), @akanjs/test (>=0.0.47 <=0.0.73) +108 more potentially affected by CVE-2025-10894 via @nx/js (>=20.0.0-beta.0 <=20.9.0-canary.20250415-bc685ce)
@nx/js NPM version =20.0.0-beta.0, =0.0.47, =0.0.2, =0.0.0, =1.0.0, =1.0.0, =0.5.0, =1.8.2, =3.1.0, =0.0.1, =0.0.1, =0.0.2-10 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NXJS-12205638...
Linux Distros Unpatched Vulnerability : CVE-2020-14711
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to...
aapns (>=19.11.0 <=23.7.0), abq (>=0.1.0 <=0.1.4) +372 more potentially affected by CVE-2025-57804 via h2 (>=2.4.4 <=4.2.0)
h2 PYPI version =2.4.4, =19.11.0, =0.1.0, =0.0.1, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.3.8 and more Source cves: CVE-2025-57804 Source advisory: OSV:GHSA-847F-9342-265H...
CVE-2025-58036
creationtimestamp| type| source ---|---|--- 2025-08-23 05:00:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx26ubapsu2p...
TencentOS Server 4: spdlog (TSSA-2025:0660)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0660 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Linux Distros Unpatched Vulnerability : CVE-2018-6042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HT...
Linux Distros Unpatched Vulnerability : CVE-2018-1067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injectio...
Linux Distros Unpatched Vulnerability : CVE-2022-41999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A...
Linux Distros Unpatched Vulnerability : CVE-2015-2611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML...
Linux Distros Unpatched Vulnerability : CVE-2020-13250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of...