EUVD-2020-22886

Malware in sbrugna...

EUVD-2004-0231

Malware in sbrugna...

EUVD-2007-6066

Malware in sbrugna...

EUVD-2021-16453

Malware in sbrugna...

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...

EUVD-2022-15521

Malicious code in bioql PyPI...

EUVD-2022-41821

Malicious code in bioql PyPI...

CVE-2025-8176 affecting package libtiff for versions less than 4.6.0-8

CVE-2025-8176 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...

CVE-2025-9165 affecting package libtiff for versions less than 4.6.0-8

CVE-2025-9165 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...

CVE-2025-58366

CVE-2025-58366 affects Onyxia (Onyxia-API) in versions 4.6.0–4.8.0. The vulnerability arises from leaking credentials of private Helm repositories via the unauthenticated public endpoint /public/catalogs, when catalogs配置 include username/password. The issue enables exposure of private repo creden...

CVE-2025-58366 Onyxia private helm repository credentials are leaked through unauthenticated API

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

CVE-2025-8534 affecting package libtiff for versions less than 4.6.0-7

CVE-2025-8534 affecting package libtiff for versions less than 4.6.0-7. A patched version of the package is available...

AZL-66545 CVE-2025-9165 affecting package libtiff for versions less than 4.6.0-8

A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is...

Linux Distros Unpatched Vulnerability : CVE-2019-5421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The Devise::Models::Lockable class, more...

AZL-66426 CVE-2025-8961 affecting package libtiff for versions less than 4.6.0-11

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

AZL-66423 CVE-2025-8961 affecting package libtiff for versions less than 4.6.0-11

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

CVE-2025-45406

A stored cross-site scripting XSS vulnerability in CodeIgniter4 v4.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the debugbartime parameter. NOTE: this is disputed by the Supplier because attackers cannot influence the value of debugbartime, and...

CVE-2025-45406

CodeIgniter4 v4.6.0 is affected by a stored XSS vulnerability in the debugbar_time parameter. The issue is described as enabling arbitrary web scripts or HTML, with a note that the supplier disputes exploitability since the value of debugbar_time may not be controllable and data is escaped by the...

PT-2025-31878 · Libtiff +2 · Libtiff +2

Name of the Vulnerable Software and Affected Versions: libtiff version 4.6.0 Description: A problematic issue exists in libtiff due to a null pointer dereference in the PS Lvl2page function within the tiff2ps component file tools/tiff2ps.c. The issue occurs when the DEFER STRILE LOAD option is...