1248 matches found
EUVD-2025-176950
Malicious code in proxy-encode-cache-easy-delta npm...
EUVD-2025-176478
Malicious code in secure-old-deploy-resolve-encode npm...
EUVD-2025-179143
Malicious code in encode-promise-cold-awk-easy npm...
EUVD-2025-179141
Malicious code in encode-route-deserialize-eta-export npm...
EUVD-2025-179702
Malicious code in cluster-decompress-double-encode-quick npm...
EUVD-2025-179116
Malicious code in enum-new-encode-tree-cluster npm...
EUVD-2025-178985
Malicious code in execute-long-pipe-file-encode npm...
EUVD-2025-150369
In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...
CVE-2025-40205
In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...
AZL-70097 CVE-2025-40205 affecting package kernel for versions less than 6.6.117.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...
CVE-2025-40205
In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...
CVE-2025-40205 btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...
CVE-2025-40205 btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...
GHSA-VM2F-46XC-5JC3 AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...
AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...
PT-2025-45777
AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encode image bs64. Since the encode image bs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the...
CVE-2025-57697
AstrBot Project v3.5.22 is vulnerable to an arbitrary file read (Directory Traversal) vulnerability within the _encode_image_bs64 function located in entities.py. The root cause is the lack of validation on the image path provided by the user in the request body; the function opens the specified ...
CLSA-2025-1762338135 apr: Fix of CVE-2022-24963
CVE-2022-24963: Fix integer overflow in aprencode functions that could lead to out-of-bounds write...
EUVD-2023-60054
Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery SSRF vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix...
OSV-2025-855 Use-of-uninitialized-value in AlphaReplace_SSE2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454314139 Crash type: Use-of-uninitialized-value Crash state: AlphaReplaceSSE2 WebPReplaceTransparentPixels WebPEncode...