JLSEC-2026-133

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

phpMyFAQ 安全漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ version 3.1.12, which stems from the ability of authenticated users to inject malicious formulas into their profile names, potentially leading to CS...

EUVD-2021-12294

Malware in sbrugna...

EUVD-2023-1269

Malicious code in bioql PyPI...

EUVD-2023-1240

Malicious code in bioql PyPI...

EUVD-2023-1343

Malicious code in bioql PyPI...

EUVD-2023-0868

Malicious code in bioql PyPI...

EUVD-2023-0929

Malicious code in bioql PyPI...

EUVD-2023-1037

Malicious code in bioql PyPI...

EUVD-2023-1164

Malicious code in bioql PyPI...

EUVD-2023-1345

Malicious code in bioql PyPI...

EUVD-2023-1435

Malicious code in bioql PyPI...

EUVD-2023-1309

Malicious code in bioql PyPI...

EUVD-2023-1315

Malicious code in bioql PyPI...

EUVD-2023-0872

Malicious code in bioql PyPI...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity due to an inefficient algorithmic complexity issue in the mjson parsing library when analyzing JSON content, such as with the jsonquery or jwtpayloadquery function. An attacker can cause resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity due to an inefficient algorithmic complexity issue in the mjson parsing library when analyzing JSON content, such as with the jsonquery or jwtpayloadquery function. An attacker can cause resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity due to an inefficient algorithmic complexity issue in the mjson parsing library when analyzing JSON content, such as with the jsonquery or jwtpayloadquery function. An attacker can cause resource...

Linux Distros Unpatched Vulnerability : CVE-2020-24972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kleopatra component before 3.1.12 and before 20.07.80 for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported...

CVE-2024-31396

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on...