EUVD-2017-0046

Malware in sbrugna...

EUVD-2019-4655

Malware in sbrugna...

EUVD-2019-4654

Malware in sbrugna...

EUVD-2021-16081

Malware in sbrugna...

EUVD-2018-0068

Malware in sbrugna...

RockyLinux 10 : exiv2 (RLSA-2025:7457)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7457 advisory. exiv2: Use After Free in Exiv2 CVE-2025-26623 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that...

EUVD-2025-26207

Malicious code in bioql PyPI...

EUVD-2024-38191

Malicious code in bioql PyPI...

EUVD-2023-0076

Malicious code in bioql PyPI...

EUVD-2024-0058

Malicious code in bioql PyPI...

EUVD-2025-4463

Malicious code in bioql PyPI...

EUVD-2023-0077

Malicious code in bioql PyPI...

EUVD-2024-0057

Malicious code in bioql PyPI...

RLSA-2025:7457 Moderate: exiv2 security update

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. Security Fixes: exiv2: Use After Free in Exiv...

exiv2 security update

An update is available for exiv2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Exiv2 is a C++ library to access image metadata, supporting read and write...

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.

...

Denial Of Service (DoS)

Exiv2 is vulnerable to Denial-of-Service DoS. The vulnerability is due to a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata, which can be exploited by crafted JPG image files to cause excessive processing time...

Fedora 43 : exiv2 (2025-c23727e694)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c23727e694 advisory. Exiv2 0.28.6 + patch to fix silent abi breakage ---- Exiv2 v0.28.6 Fixes two low severity CVEs Tenable has extracted the preceding description block...

OESA-2025-2274 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...

OESA-2025-2116 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...