1388 matches found
EUVD-2020-0031
Malware in sbrugna...
EUVD-2014-0031
Malware in sbrugna...
Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680607)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680607 advisory. LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For...
EUVD-2025-32454
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...
Directory Traversal
Overview clearml is a ClearML - Auto-Magical Experiment Manager, Version Control, and MLOps for AI Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write arbitrary files outside the intended directory by exploiting improper...
clearml is vulnerable to Path Traversal through its `safe_extract` function
A vulnerability in clearml versions before 2.0.2 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files...
CVE-2025-8917 Path Traversal Leading to Remote Code Execution in allegroai/clearml
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...
EUVD-2022-34960
Malicious code in bioql PyPI...
EUVD-2024-2999
Malicious code in bioql PyPI...
EUVD-2023-57857
Malicious code in bioql PyPI...
EUVD-2025-29418
Malicious code in bioql PyPI...
EUVD-2025-26505
Malicious code in bioql PyPI...
EUVD-2024-46943
Malicious code in bioql PyPI...
EUVD-2025-5911
Malicious code in bioql PyPI...
EUVD-2021-29509
Malicious code in bioql PyPI...
EUVD-2022-4815
Malicious code in bioql PyPI...
EUVD-2024-2240
Malicious code in bioql PyPI...
EUVD-2025-20077
Malicious code in bioql PyPI...
GHSA-466C-PFVV-V83G wrflib has a soundness issue and is unmaintained
All functions under wrflib::byteextract are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter. wrflib is unmaintained...
