502 matches found
PT-2025-18378 · Unknown · Pcman Ftp Server
Name of the Vulnerable Software and Affected Versions: PCMan FTP Server versions up to 2.0.7 Description: A critical issue affects an unknown functionality of the LS Command Handler component in PCMan FTP Server, leading to a buffer overflow. This can be exploited remotely. The exploit has been...
MGASA-2025-0117 Updated dcmtk packages fix security vulnerability
DCMTK dcmjpls JPEG-LS Decoder memory corruption. CVE-2025-2357...
Updated dcmtk packages fix security vulnerability
DCMTK dcmjpls JPEG-LS Decoder memory corruption. CVE-2025-2357...
SUSE CVE-2025-2357
A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...
CVE-2025-2357
A flaw was found in the DCMTK package. Insufficient input data validation can lead to a segmentation fault in the JPEG-LS decoder if invalid input data is processed. This vulnerability affects the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption and can be initiated...
DEBIAN-CVE-2025-2357
A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...
CVE-2025-2357 DCMTK dcmjpls JPEG-LS Decoder memory corruption
A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...
CVE-2025-2357 DCMTK dcmjpls JPEG-LS Decoder memory corruption
A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...
CVE-2025-2357
A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...
CVE-2025-2357
DCMTK 3.6.9 contains a memory-corruption vulnerability in the dcmjpls JPEG-LS Decoder. The issue can be exploited remotely, with exploitation information reported publicly. A patch named 3239a7915 is referenced as fixes for this issue; applying the patch is the advised remediation. The CVE descri...
PT-2025-11451 · Dcmtk +2 · Dcmtk +2
Name of the Vulnerable Software and Affected Versions: DCMTK version 3.6.9 Description: A critical vulnerability was found in the dcmjpls JPEG-LS Decoder component of DCMTK, affecting unknown code and leading to memory corruption. The attack can be initiated remotely. The manipulation with the...
MAL-2025-90 Malicious code in gfxapi-ls (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 784bb96d93f59dcf39d71d7b4cc12349e74183b2f5557b86474e7f6ff17e6a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gfxapi-ls (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 784bb96d93f59dcf39d71d7b4cc12349e74183b2f5557b86474e7f6ff17e6a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-2907
Name of the Vulnerable Software and Affected Versions vsftpd affected versions not specified Description A flaw exists in vsftpd that allows for a denial of service DoS. This is due to an integer overflow in the parsing of the ls command parameter, which can be triggered by a remote, authenticate...
Malicious code in ls-upload-cmpt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 934d06728d09c5d22434ad0243a477298619e5f2656a37ef70b6b1c7abbacf98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11051 Malicious code in ls-upload-cmpt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 934d06728d09c5d22434ad0243a477298619e5f2656a37ef70b6b1c7abbacf98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-30896
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...
InfluxData InfluxDB 安全漏洞
InfluxData InfluxDB is a Go-based development of temporal databases from InfluxData, USA. A security vulnerability exists in InfluxData InfluxDB version 2.7.10 and earlier, which stems from a vulnerability that allows an allAccess administrator to retrieve all raw tokens via the influx auth ls...
CVE-2024-30896
In InfluxDB OSS versions 2.x through 2.7.11 , a business logic flaw allows users with a valid allAccess token to escalate privileges to the operator level. This occurs because allAccess tokens can list all authorizations within the same organization without type restrictions, specifically via the...