9503 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-11210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the...
Linux Distros Unpatched Vulnerability : CVE-2010-3704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics...
OESA-2025-1996 python-werkzeug security update
A comprehensive WSGI web application library Security Fixes: Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal...
Linux Distros Unpatched Vulnerability : CVE-2021-47257
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr...
Linux Distros Unpatched Vulnerability : CVE-2020-11565
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.6.2. mpolparsestr in mm/mempolicy.c has a stack- based out-of-bounds write because an empty nodelist is...
Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)
The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...
Malicious code in permission-parse-static-wind-hash (npm)
The package permission-parse-static-wind-hash was found to contain malicious code...
Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)
The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...
Malicious code in geochronology-markdown-jupiter-dotenv-parse-variables (npm)
The package geochronology-markdown-jupiter-dotenv-parse-variables was found to contain malicious code...
Malicious code in vite-parse (npm)
The package vite-parse was found to contain malicious code...
Malicious code in ips-visual-parse (npm)
The package ips-visual-parse was found to contain malicious code...
MAL-2025-18662 Malicious code in dotenv-parse-variables-neutrino-spinner-higgs (npm)
The package dotenv-parse-variables-neutrino-spinner-higgs was found to contain malicious code...
MAL-2025-28876 Malicious code in parse-async-theta-user-thread (npm)
The package parse-async-theta-user-thread was found to contain malicious code...
MAL-2025-28879 Malicious code in parse-server-hotfix (npm)
The package parse-server-hotfix was found to contain malicious code...
Malicious code in blaze-dotenv-parse-variables-spawn-foundation (npm)
The package blaze-dotenv-parse-variables-spawn-foundation was found to contain malicious code...
Malicious code in cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables (npm)
The package cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables was found to contain malicious code...
Malicious code in body-parse-xml (npm)
The package body-parse-xml was found to contain malicious code...
Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm)
The package webdriverio-nucleosynthesis-fork-dotenv-parse-variables was found to contain malicious code...