6841 matches found
CVE-2025-54777
Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Email certificate, it may cause a denial-of-service issue that disable the Web Connection feature...
CVE-2025-54777: Uncaught Exception
Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Email certificate, it may cause a denial-of-service issue that disable the Web Connection feature...
USN-7703-4: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...
Linux Distros Unpatched Vulnerability : CVE-2023-45929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr. CVE-2023-45929 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2020-18378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a...
Linux Distros Unpatched Vulnerability : CVE-2023-45927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf. CVE-2023-45927 Note that Nessus relies on the presence of the package...
Linux Distros Unpatched Vulnerability : CVE-2007-2243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to missing scalar checks in the Verify and prepareVerification functions. An attacker can produce multiple valid signatures for the same message by manipulating the S value in EdDSA a...
CVE-2025-57801 gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack...
PT-2025-34495
Name of the Vulnerable Software and Affected Versions: gnark versions prior to 0.14.0 Description: gnark is a zero-knowledge proof system framework. The Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleabili...
Malicious code in @zalastax/nolb-passport-s (npm)
The package @zalastax/nolb-passport-s was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-s (npm)
The package @zalastax/nolb-lion-s was found to contain malicious code...
s-collection.js (1.0.0) potentially affected by unknown CVE via lodash.js (0.0.1-security)
lodash.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash.js and may be impacted: - s-collection.js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25506...
Malicious code in @zalastax/nolb-node-red-s (npm)
The package @zalastax/nolb-node-red-s was found to contain malicious code...
Malicious code in @zalastax/nolb-google-s (npm)
The package @zalastax/nolb-google-s was found to contain malicious code...
Malicious code in @zalastax/nolb-api-s (npm)
The package @zalastax/nolb-api-s was found to contain malicious code...
Malicious code in @zalastax/nolb-ngx-s (npm)
The package @zalastax/nolb-ngx-s was found to contain malicious code...
MAL-2025-11767 Malicious code in @zalastax/nolb-graphql-s (npm)
The package @zalastax/nolb-graphql-s was found to contain malicious code...