405 matches found
MiracleLinux 4 : libssh2-1.4.2-3.AXS4.1 (AXSA:2019-3922:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3922:01 advisory. libssh2: Integer overflow in transport read resulting in out of bounds write CVE-2019-3855 libssh2: Integer overflow in keyboard interactive handlin...
CVE-2019-11143
Improper permissions in the software installer for IntelR Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-1912
The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the validatefile Function. This makes it possible for authenticated attackers, with Administrator-level...
CVE-2025-15135
CVE-2025-15135 affects the project joey-zhou xiaozhi-esp32-server-java (up to 3.0.0). The vulnerability is in the Cookie Handler component, specifically the function tryAuthenticateWithCookies() inside AuthenticationInterceptor.java. Manipulation of this function can lead to improper authenticati...
curl: Functional Regression in Digest Authentication: Failure to handle optional spaces and escaped quotes
Summary A recent migration of the Digest authentication parsing logic to the curlxstr strparse API introduced two functional parsing regressions in lib/vauth/digest.c. 1. Optional Whitespace OWS Handling The current implementation fails to skip optional whitespace after comma delimiters in...
EUVD-2025-179137
Malicious code in encrypt-meta-authenticate-log-string npm...
Malicious code in minify-mu-catch-authenticate-user (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3b2212cf649bbcec1267832b53976a224b9a0387e17e082b8641dda41bc920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177184
Malicious code in pi-authenticate-cold-encrypt-alert npm...
EUVD-2025-176237
Malicious code in stack-authenticate-boolean-compile-kappa npm...
EUVD-2025-176381
Malicious code in signal-authenticate-cluster-await-byte npm...
EUVD-2025-180215
Malicious code in authenticate-scale-analyze-book-scale npm...
EUVD-2025-180520
Malicious code in abstract-mu-kappa-authenticate-decode npm...
EUVD-2025-175779
Malicious code in upsilon-sed-authenticate-await-tau npm...
EUVD-2025-180180
Malicious code in await-tree-cat-omega-authenticate npm...
EUVD-2025-177883
Malicious code in meta-grep-stack-serialize-authenticate npm...
EUVD-2025-176424
Malicious code in serialize-eta-authenticate-authorize-sigma npm...
EUVD-2025-180219
Malicious code in authenticate-array-cluster-mock-import npm...
EUVD-2025-180217
Malicious code in authenticate-function-scale-cloud-socket npm...