CVE-2025-22921
- EPSS 0.17%
- Veröffentlicht 18.02.2025 22:15:18
- Zuletzt bearbeitet 12.01.2026 13:08:11
FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.
CVE-2025-26465
- EPSS 64.39%
- Veröffentlicht 18.02.2025 19:15:29
- Zuletzt bearbeitet 03.11.2025 22:18:41
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in spec...
CVE-2025-23419
- EPSS 0.63%
- Veröffentlicht 05.02.2025 18:15:33
- Zuletzt bearbeitet 27.01.2026 13:30:41
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets ht...
CVE-2025-0781
- EPSS 0.08%
- Veröffentlicht 28.01.2025 17:15:25
- Zuletzt bearbeitet 06.08.2025 19:25:13
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.
CVE-2025-21502
- EPSS 0.08%
- Veröffentlicht 21.01.2025 21:15:15
- Zuletzt bearbeitet 18.06.2025 19:07:57
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Ora...
CVE-2025-21490
- EPSS 0.38%
- Veröffentlicht 21.01.2025 21:15:13
- Zuletzt bearbeitet 03.11.2025 21:18:55
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with net...
CVE-2024-50349
- EPSS 0.39%
- Veröffentlicht 14.01.2025 19:15:32
- Zuletzt bearbeitet 18.12.2025 16:42:54
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credent...
CVE-2024-52006
- EPSS 0.47%
- Veröffentlicht 14.01.2025 19:15:32
- Zuletzt bearbeitet 18.12.2025 16:10:34
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git ...
CVE-2024-56374
- EPSS 0.61%
- Veröffentlicht 14.01.2025 19:15:32
- Zuletzt bearbeitet 03.10.2025 13:16:13
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented...
CVE-2023-27539
- EPSS 0.21%
- Veröffentlicht 09.01.2025 01:15:07
- Zuletzt bearbeitet 10.10.2025 16:31:34
There is a denial of service vulnerability in the header parsing component of Rack.