995 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-38439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in...
CVE-2025-54175
QuickCMS.EXT is affected by a Reflected XSS in the sFileName parameter of the thumbnail viewer. The issue allows arbitrary JavaScript execution via a crafted URL. Only version 6.8 has been tested and confirmed vulnerable; other versions may also be affected. The vendor was notified but did not pr...
PT-2025-34052
Name of the Vulnerable Software and Affected Versions: QuickCMS.EXT version 6.8 QuickCMS.EXT affected versions not specified Description: QuickCMS.EXT is susceptible to a Reflected Cross-Site Scripting XSS issue within the thumbnail viewer functionality. An attacker can create a malicious URL tha...
CVE-2025-9165 LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak
A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is...
Malicious code in h1-cli-ext-iam-project-select (npm)
The package h1-cli-ext-iam-project-select was found to contain malicious code...
h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (1.0.1-alpha.1)
h1-cli-ext-iam-project-select NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...
Malicious code in luster-ext-env (npm)
The package luster-ext-env was found to contain malicious code...
Malicious code in mozaik-ext-git (npm)
The package mozaik-ext-git was found to contain malicious code...
Malicious code in az-ext (npm)
The package az-ext was found to contain malicious code...
Malicious code in ext-zip (npm)
The package ext-zip was found to contain malicious code...
h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (1.0.1-alpha.1)
h1-cli-ext-root-openapi-generator NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unkno...
MAL-2025-26780 Malicious code in mozaik-ext-jira-agile (npm)
The package mozaik-ext-jira-agile was found to contain malicious code...
MAL-2025-22081 Malicious code in h1-cli-ext-root-openapi-generator (npm)
The package h1-cli-ext-root-openapi-generator was found to contain malicious code...
MAL-2025-25699 Malicious code in luster-ext-env (npm)
The package luster-ext-env was found to contain malicious code...
Malicious code in h1-cli-ext-root-openapi-generator (npm)
The package h1-cli-ext-root-openapi-generator was found to contain malicious code...
Malicious code in mozaik-ext-jiraagile (npm)
The package mozaik-ext-jiraagile was found to contain malicious code...
Malicious code in @zalastax/nolb-ext_ (npm)
The package @zalastax/nolb-ext was found to contain malicious code...
h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)
h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...