320 matches found
PT-2026-22038
Name of the Vulnerable Software and Affected Versions TinyWeb versions prior to 2.02 Description TinyWeb is a web server HTTP, HTTPS written in Delphi for Win32. The server creates a new operating system thread for each incoming connection without enforcing a maximum concurrency limit or an...
MiracleLinux 8 : java-17-openjdk-17.0.9.0.9-2.el8 (AXSA:2023-6546:18)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6546:18 advisory. OpenJDK: memory corruption issue on x8664 with AVX-512 8317121 CVE-2023-22025 OpenJDK: certificate path validation issue during client authenticatio...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003616)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003616 advisory. arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's...
MiracleLinux 7 : libwmf-0.2.8.4-41.el7 (AXSA:2015-512:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-512:01 advisory. A library for reading and converting Windows MetaFile vector graphics WMF. Security issues fixed with this release: CVE-2015-0848 Heap-based buffer...
EUVD-2018-3277
Malware in sbrugna...
EUVD-2016-7935
Malware in sbrugna...
EUVD-2017-2766
Malware in sbrugna...
EUVD-2025-26780
Malicious code in bioql PyPI...
EUVD-2024-36062
Malicious code in bioql PyPI...
CVE-2025-34208: Use of a Broken or Risky Cryptographic Algorithm
Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's hash function in multiple files serverwriterequestsusers.php, updatedatabase.php,...
CVE-2025-34205
Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 VA and SaaS deployments contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php found in several containers...
Malicious code in simple-js-sha3-512 (npm)
The package simple-js-sha3-512 was found to contain malicious code...
MAL-2025-33271 Malicious code in simple-js-sha3-512 (npm)
The package simple-js-sha3-512 was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2019-12817
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another'...
Selea’s various products have security vulnerabilities
Selea Targa iZero and others are an optical character recognition camera for automatic license plate recognition from Selea, Italy. A security vulnerability exists in various Selea products, which stems from an unvalidated JSON POST parameter ipnotifyaddress and url, which could lead to a...
CVE-2024-37880
The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because polyfrommsg in poly.c does not prevent Clang from...
Security update for qemu
This update for qemu fixes the following issues: CVE-2023-42467: Disallow block sizes smaller than 512 bsc1215192. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed f...
SUSE-RU-2024:3971-1 Recommended update for mojo-parent
This update for mojo-parent fixes the following issues: xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets bsc1201684 - Changes and Bugs fixed: Java 8 is now the minimum requirement...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the xarray of the mm/filemap module being unable to accept arbitrary page cache sizes. On ARM64 systems, a...
