⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Automatically generated suggestions

Create Draft to queue a suggestion for refinement.

Dismiss to remove a suggestion from the queue.

CVE-2024-25982
4.3 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): NONE
  • Availability impact (A): NONE
created 2 months, 2 weeks ago
Msa-24-0005: csrf risk in language import utility

The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.

moodle
<4.2.6
<4.1.9
<4.3.3

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

pkgs.moodle.x86_64-linux

Free and open-source learning management system (LMS) written in PHP

pkgs.moodle.aarch64-linux

Free and open-source learning management system (LMS) written in PHP

pkgs.moodle.x86_64-darwin

Free and open-source learning management system (LMS) written in PHP

pkgs.moodle.aarch64-darwin

Free and open-source learning management system (LMS) written in PHP

pkgs.texlivePackages.moodle

Generating Moodle quizzes via LaTeX

pkgs.texlivePackages.moodle.x86_64-linux

Generating Moodle quizzes via LaTeX
Package maintainers: 2
CVE-2024-6387
8.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
created 2 months, 2 weeks ago
Openssh: regresshion - race condition in ssh allows rce/dos

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

rhcos
*
OpenSSH
=<9.7p1
openssh
*
rhceph-6-rhel9

pkgs.openssh_hpn

An implementation of the SSH protocol with high performance networking patches

pkgs.opensshWithKerberos

Implementation of the SSH protocol

pkgs.openssh_hpnWithKerberos

Implementation of the SSH protocol with high performance networking patches

pkgs.opensshTest.x86_64-linux

Implementation of the SSH protocol

pkgs.openssh_hpn.x86_64-linux

Implementation of the SSH protocol with high performance networking patches

pkgs.opensshTest.aarch64-linux

Implementation of the SSH protocol

pkgs.opensshTest.x86_64-darwin

Implementation of the SSH protocol

pkgs.openssh_hpn.aarch64-linux

Implementation of the SSH protocol with high performance networking patches

pkgs.openssh_hpn.x86_64-darwin

Implementation of the SSH protocol with high performance networking patches

pkgs.opensshTest.aarch64-darwin

Implementation of the SSH protocol

pkgs.openssh_hpn.aarch64-darwin

Implementation of the SSH protocol with high performance networking patches

pkgs.perl536Packages.NetOpenSSH

Perl SSH client package implemented on top of OpenSSH

pkgs.perl538Packages.NetOpenSSH

Perl SSH client package implemented on top of OpenSSH

pkgs.perl540Packages.NetOpenSSH

Perl SSH client package implemented on top of OpenSSH

pkgs.openssh_gssapi.x86_64-linux

Implementation of the SSH protocol with GSSAPI support

pkgs.openssh_gssapi.aarch64-linux

Implementation of the SSH protocol with GSSAPI support

pkgs.openssh_gssapi.x86_64-darwin

Implementation of the SSH protocol with GSSAPI support

pkgs.openssh_gssapi.aarch64-darwin

Implementation of the SSH protocol with GSSAPI support

pkgs.opensshWithKerberos.x86_64-linux

Implementation of the SSH protocol

pkgs.opensshWithKerberos.aarch64-linux

Implementation of the SSH protocol

pkgs.opensshWithKerberos.x86_64-darwin

Implementation of the SSH protocol

pkgs.opensshWithKerberos.aarch64-darwin

Implementation of the SSH protocol

pkgs.openssh_hpnWithKerberos.x86_64-linux

Implementation of the SSH protocol with high performance networking patches

pkgs.openssh_hpnWithKerberos.aarch64-linux

Implementation of the SSH protocol with high performance networking patches

pkgs.openssh_hpnWithKerberos.x86_64-darwin

Implementation of the SSH protocol with high performance networking patches

pkgs.lxqt.lxqt-openssh-askpass.x86_64-linux

GUI to query passwords on behalf of SSH agents

pkgs.openssh_hpnWithKerberos.aarch64-darwin

Implementation of the SSH protocol with high performance networking patches

pkgs.lxqt.lxqt-openssh-askpass.aarch64-linux

GUI to query passwords on behalf of SSH agents

pkgs.perl536Packages.NetOpenSSH.x86_64-linux

Perl SSH client package implemented on top of OpenSSH

pkgs.perl538Packages.NetOpenSSH.x86_64-linux

Perl SSH client package implemented on top of OpenSSH

pkgs.perl540Packages.NetOpenSSH.x86_64-linux

Perl SSH client package implemented on top of OpenSSH

pkgs.perl536Packages.NetOpenSSH.aarch64-linux

Perl SSH client package implemented on top of OpenSSH

pkgs.perl536Packages.NetOpenSSH.x86_64-darwin

Perl SSH client package implemented on top of OpenSSH

pkgs.perl538Packages.NetOpenSSH.aarch64-linux

Perl SSH client package implemented on top of OpenSSH

pkgs.perl538Packages.NetOpenSSH.x86_64-darwin

Perl SSH client package implemented on top of OpenSSH

pkgs.perl540Packages.NetOpenSSH.aarch64-linux

Perl SSH client package implemented on top of OpenSSH

pkgs.perl540Packages.NetOpenSSH.x86_64-darwin

Perl SSH client package implemented on top of OpenSSH

pkgs.perl536Packages.NetOpenSSH.aarch64-darwin

Perl SSH client package implemented on top of OpenSSH

pkgs.perl538Packages.NetOpenSSH.aarch64-darwin

Perl SSH client package implemented on top of OpenSSH

pkgs.perl540Packages.NetOpenSSH.aarch64-darwin

Perl SSH client package implemented on top of OpenSSH
Package maintainers: 7
CVE-2025-46443
4.9 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): CHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): LOW
  • Availability impact (A): NONE
created 2 months, 2 weeks ago
WordPress Animate <= 0.5 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery (SSRF) vulnerability in Adam Pery Animate allows Server Side Request Forgery. This issue affects Animate: from n/a through 0.5.

animate
=<0.5

pkgs.texlivePackages.animate

Create PDF and SVG animations from graphics files and inline graphics

pkgs.texlivePackages.animate.x86_64-linux

Create PDF and SVG animations from graphics files and inline graphics
CVE-2025-46505
6.5 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): REQUIRED
  • Scope (S): CHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): LOW
  • Availability impact (A): LOW
created 2 months, 2 weeks ago
WordPress Peekaboo <= 1.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in farinspace Peekaboo allows Stored XSS. This issue affects Peekaboo: from n/a through 1.1.

peekaboo
=<1.1
CVE-2025-46421
6.8 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): NONE
created 2 months, 2 weeks ago
Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.

libsoup
*
libsoup3
*

pkgs.libsoup_2_4

HTTP client/server library for GNOME

pkgs.gnome.libsoup

HTTP client/server library for GNOME

pkgs.libsoup.x86_64-linux

HTTP client/server library for GNOME

pkgs.libsoup.aarch64-linux

HTTP client/server library for GNOME

pkgs.libsoup.x86_64-darwin

HTTP client/server library for GNOME

pkgs.libsoup.aarch64-darwin

HTTP client/server library for GNOME

pkgs.libsoup_3.x86_64-linux

HTTP client/server library for GNOME

pkgs.libsoup_3.aarch64-linux

HTTP client/server library for GNOME

pkgs.libsoup_3.x86_64-darwin

HTTP client/server library for GNOME

pkgs.libsoup_2_4.x86_64-linux

HTTP client/server library for GNOME

pkgs.libsoup_3.aarch64-darwin

HTTP client/server library for GNOME

pkgs.libsoup_2_4.aarch64-linux

HTTP client/server library for GNOME

pkgs.libsoup_2_4.x86_64-darwin

HTTP client/server library for GNOME

pkgs.libsoup_2_4.aarch64-darwin

HTTP client/server library for GNOME

pkgs.gnome2.libsoup.x86_64-linux

HTTP client/server library for GNOME

pkgs.gnome2.libsoup.aarch64-linux

HTTP client/server library for GNOME

pkgs.gnome2.libsoup.x86_64-darwin

HTTP client/server library for GNOME

pkgs.gnome2.libsoup.aarch64-darwin

HTTP client/server library for GNOME

pkgs.tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4"

Test whether libsoup-2.74.3 exposes pkg-config modules libsoup-gnome-2.4

pkgs.tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4".x86_64-linux

Test whether libsoup-2.74.3 exposes pkg-config modules libsoup-gnome-2.4

pkgs.tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4".aarch64-linux

Test whether libsoup-2.74.3 exposes pkg-config modules libsoup-gnome-2.4

pkgs.tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4".x86_64-darwin

Test whether libsoup-2.74.3 exposes pkg-config modules libsoup-gnome-2.4

pkgs.tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4".aarch64-darwin

Test whether libsoup-2.74.3 exposes pkg-config modules libsoup-gnome-2.4
Package maintainers: 6
CVE-2025-46399
7.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): NONE
created 2 months, 2 weeks ago
fig2dev segmentation fault in genge_itp_spline

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via genge_itp_spline function.

xfig
=<3.2.9a
fig2dev
==3.2.9a

pkgs.fig2dev.x86_64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.x86_64-darwin

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-darwin

Tool to convert Xfig files to other formats
Package maintainers: 1
CVE-2025-46400
7.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): NONE
created 2 months, 2 weeks ago
fig2dev segmentation fault in read_arcobject

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via read_arcobject function.

xfig
=<3.2.9a
fig2dev
==3.2.9a

pkgs.fig2dev.x86_64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.x86_64-darwin

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-darwin

Tool to convert Xfig files to other formats
Package maintainers: 1
CVE-2025-46397
7.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): NONE
created 2 months, 2 weeks ago
fig2dev stack-overflow

Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezier_spline function.

xfig
=<3.2.9a
fig2dev
==3.2.9a

pkgs.fig2dev.x86_64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.x86_64-darwin

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-darwin

Tool to convert Xfig files to other formats
Package maintainers: 1
CVE-2025-46398
7.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): NONE
created 2 months, 2 weeks ago
fig2dev stack-overflow via read_objects

Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via read_objects function.

xfig
=<3.2.9a
fig2dev
==3.2.9a

pkgs.fig2dev.x86_64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-linux

Tool to convert Xfig files to other formats

pkgs.fig2dev.x86_64-darwin

Tool to convert Xfig files to other formats

pkgs.fig2dev.aarch64-darwin

Tool to convert Xfig files to other formats
Package maintainers: 1
CVE-2024-21885
7.8 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
created 2 months, 2 weeks ago
Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.

tigervnc
*
xorg-server
==1.21.1.7
xorg-x11-server
*
xorg-x11-server-Xwayland
*
Package maintainers: 1