Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea versions prior to 1.22.2, which stems from the use of v-html instead of v-text in the search input box, which could lead to a cross-site scripting attack...

PT-2025-53440

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.22.2 Description Gitea versions before 1.22.2 contain a cross-site scripting XSS issue. The search input box, used when creating tags and branches, utilizes v-html instead of v-text, which allows for the execution of...

CVE-2025-68942

Gitea before 1.22.2 allows XSS because the search input box for creating tags and branches is v-html instead of v-text...

EUVD-2025-27509

Malicious code in bioql PyPI...

EUVD-2025-27511

Malicious code in bioql PyPI...

EUVD-2023-1842

Malicious code in bioql PyPI...

EUVD-2022-0101

Malicious code in bioql PyPI...

CVE-2025-54258

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged...

CVE-2025-54258

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged...

CVE-2025-54259

Substance3D - Modeler versions 1.22.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Sco...

CVE-2025-54258 Substance3D - Modeler | Use After Free (CWE-416)

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged...

CVE-2025-54258 Substance3D - Modeler | Use After Free (CWE-416)

Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is unchanged...

PT-2025-36986

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.2 and earlier Description: Substance3D - Modeler is affected by an Integer Overflow or Wraparound vulnerability. Successful exploitation of this issue could lead to arbitrary code execution within the conte...

PT-2025-36985

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.2 and earlier Description: Substance3D - Modeler is affected by a Use After Free vulnerability. Successful exploitation of this issue could lead to arbitrary code execution within the context of the current...

PT-2025-36987

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.2 and earlier Description: Substance3D - Modeler is affected by an out-of-bounds read issue when processing a specially crafted file. This can lead to reading beyond the boundaries of allocated memory. An...

CVE-2023-35930

SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. Any user making a negative authorization decision based on the results of a LookupResources request with 1.22.0 is affected. For example, using LookupResources...

CVE-2022-2523

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...

NumPy < 1.22.2 Null Pointer Dereference

The version of NumPy installed on the remote host is prior to 1.22.2. It is, therefore, affected by a Null Pointer Dereference vulnerability exists in numpy.sort in NumPy prior to 1.22.2 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS...

DEBIAN-CVE-2024-8947

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is rather high. The...

UBUNTU-CVE-2024-8947

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is rather high. The...