152 matches found
CVE-2025-12149: Exposure of Sensitive Information to an Unauthorized Actor
In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security DLS is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices...
EUVD-2018-9933
Malware in sbrugna...
EUVD-2018-9931
Malware in sbrugna...
EUVD-2018-9932
Malware in sbrugna...
EUVD-2018-6374
Malware in sbrugna...
EUVD-2018-9930
Malware in sbrugna...
EUVD-2018-9935
Malware in sbrugna...
EUVD-2018-6373
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-14456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cpp. CVE-2018-14456 Note that Nessus relie...
Linux Distros Unpatched Vulnerability : CVE-2018-18197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...
Linux Distros Unpatched Vulnerability : CVE-2018-18193
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp. CVE-2018-18193 No...
Multiple vulnerabilities in multiple iND products
Overview Multiple products provided by iND Co.,Ltd contain multiple vulnerabilities listed below. Insecure storage of sensitive information CWE-922 - CVE-2025-53507 OS command injection CWE-78 - CVE-2025-53508 HL330-DLS, HL320-DLS Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported...
iND多款产品 安全漏洞
The iND HL330-DLS and others are an embedded hardware terminal from iND Japan. A security vulnerability exists in several iND products. The vulnerability stems from the insecure storage of sensitive information, which may lead to the disclosure of configuration information. The following products...
Linux Distros Unpatched Vulnerability : CVE-2018-18194
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample in DLS.cpp. CVE-2018-18194 Note that Nessus relies on...
CVE-2018-18192
An issue was discovered in libgig 4.1.0. There is a NULL pointer dereference in the function DLS::File::GetFirstSample in DLS.cpp...
Malicious code in airbnb-dls-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d026d9563a73efac2558b2cf71cd6696600aecb85004606ba3dd3a87100bad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @swiggy-private/dls-web-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866e9fd01cfe3133ef1ad9f34a13b577f9296d283c389de22605e996c5ff2de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
dls-technik.de Improper Access Control vulnerability OBB-3816427
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dls-technik.de Improper Access Control vulnerability OBB-3765445
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
