3370 matches found
Azure Linux 3.0 Security Update: coredns / ig / keda (CVE-2025-29786)
The version of coredns / ig / keda installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-29786 advisory. - Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if th...
CVE-2025-27476
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...
CVE-2025-22452
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
CVE-2025-22842
in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...
Angular-Base64-Upload Library 0.1.20 - Remote Code Execution (RCE)
Exploit Title: Angular-Base64-Upload Library 0.1.20 - Remote Code Execution RCE Date: 10 October 2024 Discovered by : Ravindu Wickramasinghe | rvz @rvizx9 Exploit Author: Ravindu Wickramasinghe | rvz @rvizx9 Vendor Homepage: https://www.npmjs.com/package/angular-base64-upload Software Link:...
BELL-CVE-2025-21983
Bulletin has no description...
Open Asset Import Library 安全漏洞
Open Asset Import Library assimp is an Open Asset Import Library open source library. A security vulnerability exists in Open Asset Import Library version 5.4.3, which stems from a resource consumption in the MDL File Handler component...
CVE-2025-29484
CVE-2025-29484 concerns libming v0.4.8, where the parseABC_NS_SET_INFO function can trigger an out-of-memory condition leading to a Denial of Service (allocator exhaustion). The vulnerability is described as a DoS with a network attack vector (no user interaction) and a high impact to availabilit...
CVE-2025-30222 Shescape has potential environment variable exposure on Windows with CMD
Shescape is a simple shell escape library for JavaScript. Versions 1.7.2 through 2.1.1 are vulnerable to potential environment variable exposure on Windows with CMD. This impact users of Shescape on Windows that explicitly configure shell: 'cmd.exe' or shell: true using any of...
DEBIAN-CVE-2025-2754
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the...
PYSEC-2025-165
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the...
DEBIAN-CVE-2025-2755
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument...
UBUNTU-CVE-2025-2750
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is...
CVE-2025-1798
The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks...
Open Asset Import Library（assimp） 安全漏洞
Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from an incorrect operation of the parameter tmp that can cause a heap buffer overflow...
Open Asset Import Library（assimp） 缓冲区错误漏洞
Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the presence of out-of-bounds writes...
Open Asset Import Library 安全漏洞
Open Asset Import Library assimp is a library of Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library version 5.4.3, which stems from a divide-by-zero error in the MDLImporter::InternReadFileQuake1 function in the code/AssetLib/MDL/MDLLoader.cpp file...
ado-sfttrainer (>=1.0.1 <=1.8.0), aim-mlflow (>=0.1.0 <=0.2.1) +27 more potentially affected by CVE-2024-7760 via aim (>=3.17.4 <=4.0.3)
aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2024-7760 Source advisory: SNYK:PYTHON-AIM-9637809...
USN-7356-1 uriparser vulnerabilities
It was discovered that uriparser did not correctly handle certain inputs, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2024-34402, CVE-2024-34403...