1417 matches found
EUVD-2025-31058
Malicious code in bioql PyPI...
EUVD-2023-1481
Malicious code in bioql PyPI...
EUVD-2022-33593
Malicious code in bioql PyPI...
lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.
...
Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Improper Validation of Syntactic Correctness of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the torch.Tensor.random function when a model is compiled with Inductor. An attacker can cause the application to crash or become unresponsive by triggering a syntax error...
GHSA-R2RV-8PP3-65XW spmrc vulnerable to prototype pollution
spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability in the set and config function of spmrc version 1.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum...
CVE-2025-56819
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...
CVE-2025-56819
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...
CVE-2025-56819
The Datart open-source data visualization platform (version 1.0.0-rc.3 ) is vulnerable to Remote Code Execution (RCE) due to improper handling of the INIT connection parameter. This flaw, classified as CWE-78 (OS Command Injection), allows a remote attacker to execute arbitrary code, potentially ...
datart security vulnerabilities
datart is an open source data visualization open platform by running-elephant. A security vulnerability exists in datart version 1.0.0-rc.3, which stems from mishandling of configuration files and can lead to path traversal and remote code execution...
CVE-2025-56819
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...
PT-2025-39288
Name of the Vulnerable Software and Affected Versions Datart version 1.0.0-rc.3 Description An issue allows a remote attacker to execute arbitrary code via the INIT connection parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
CVE-2025-56815
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...
datart security vulnerabilities
datart is an open source data visualization open platform by running-elephant. A security vulnerability exists in datart version 1.0.0-rc.3, which stems from improper handling of the INIT connection parameter and could lead to the execution of arbitrary code...
Fedora 43 : kernel / kernel-headers (2025-22c5cc654d)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-22c5cc654d advisory. The 6.17 rc6 kernel build contains a number of important fixes across the tree. It also includes mitigations for the VMSCAPE vulnerability on x86 CPUs. This...
CVE-2023-3079 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-rc, linux-vmware...
CVE-2021-3669 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-rc, linux-vmware...