2913 matches found
EUVD-2021-3027
Malicious code in bioql PyPI...
EUVD-2024-52780
Malicious code in bioql PyPI...
EUVD-2022-0819
Malicious code in bioql PyPI...
EUVD-2025-30331
Malicious code in bioql PyPI...
EUVD-2022-32320
Malicious code in bioql PyPI...
EUVD-2021-3031
Malicious code in bioql PyPI...
EUVD-2021-3033
Malicious code in bioql PyPI...
EUVD-2021-3233
Malicious code in bioql PyPI...
CVE-2025-59344
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
CVE-2025-59344
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
CVE-2025-59344 AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
CVE-2025-59344 AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
PT-2025-38575
Name of the Vulnerable Software and Affected Versions AliasVault API versions 0.23.0 and lower Description A server-side request forgery SSRF vulnerability exists in the favicon extraction feature. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
Linux Distros Unpatched Vulnerability : CVE-2017-0592
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause...
Linux Distros Unpatched Vulnerability : CVE-2016-2506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not valida...
Linux Distros Unpatched Vulnerability : CVE-2019-2109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code...
Linux Distros Unpatched Vulnerability : CVE-2017-15600
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTORnsfextractmethod function of plugins/nsfextractor.c. CVE-2017-15600 Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2017-15922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c. CVE-2017-15922 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2022-24614
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memo...
Linux Distros Unpatched Vulnerability : CVE-2018-16430
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c. CVE-2018-16430 Note that Nessus relies on t...