Linux Distros Unpatched Vulnerability : CVE-2016-1927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random...

Linux Distros Unpatched Vulnerability : CVE-2024-53986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of...

Linux Distros Unpatched Vulnerability : CVE-2022-23519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, a possible XSS vulnerability with certain...

Linux Distros Unpatched Vulnerability : CVE-2022-23772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. CVE-2022-23772 Note th...

Linux Distros Unpatched Vulnerability : CVE-2022-22817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could al...

[SECURITY] Fedora 42 Update: pandoc-3.1.11.1-33.fc42

Pandoc is a Haskell library for converting from one markup format to another. The formats it can handle include - light markup formats many variants of Markdown, reStructuredText, AsciiDoc, Org-mode, Muse, Textile, txt2tags - HTML formats HTML 4 and 5 - Ebook formats EPUB v2 and v3, FB2 -...

Malicious code in sunruse-math-vector (npm)

The package sunruse-math-vector was found to contain malicious code...

Malicious code in sunruse-math-aabb (npm)

The package sunruse-math-aabb was found to contain malicious code...

MAL-2025-34185 Malicious code in sunruse-math-vector (npm)

The package sunruse-math-vector was found to contain malicious code...

MAL-2025-17911 Malicious code in d3-brave-math (npm)

The package d3-brave-math was found to contain malicious code...

Malicious code in Math (npm)

The package Math was found to contain malicious code...

MAL-2025-26007 Malicious code in math_example113 (npm)

The package mathexample113 was found to contain malicious code...

Malicious code in d3-brave-math (npm)

The package d3-brave-math was found to contain malicious code...

MAL-2025-34184 Malicious code in sunruse-math-aabb (npm)

The package sunruse-math-aabb was found to contain malicious code...

MAL-2025-26006 Malicious code in Math (npm)

The package Math was found to contain malicious code...

The vulnerability of the PHPOffice Math library, related to incorrect restrictions on XML links to external objects, allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the PHPOffice Math library is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

CVE-2025-48072

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation due to bad pointer math when decompressing DWAA-packed scan-line EXR...

[SECURITY] Fedora 41 Update: glibc-2.40-27.fc41

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Predictable Value Range from Previous Values

Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...

Predictable Value Range from Previous Values

Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...