253 matches found
yawkat LZ4 Java has a possible information leak in Java safe decompressor
Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is reused without being cleared, this may lead to...
Allocation of Resources Without Limits or Throttling
Overview brotlicffi is a Python CFFI bindings to the Brotli library Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to missing limits on decompressed output size in the Decompressor.decompress and Decompressor.process methods. These...
JLSEC-2025-216 In Mbed TLS before 3.1.0, `psa_aead_generate_nonce` allows policy bypass or oracle-based decryption...
In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...
JLSEC-2025-215 In Mbed TLS before 2.28.0 and 3.x before 3.1.0, `psa_cipher_generate_iv` and `psa_cipher_encrypt`...
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...
TencentOS Server 4: redis (TSSA-2025:0376)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0376 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
EUVD-2018-7607
Malware in sbrugna...
EUVD-2016-3533
Malware in sbrugna...
EUVD-2019-7574
Malware in sbrugna...
EUVD-2018-7598
Malware in sbrugna...
EUVD-2020-12658
Malware in sbrugna...
EUVD-2019-3580
Malware in sbrugna...
EUVD-2020-7347
Malware in sbrugna...
RLSA-2025:7429 Important: redis:7 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
EUVD-2025-9993
Malicious code in bioql PyPI...
EUVD-2025-12407
Malicious code in bioql PyPI...
EUVD-2021-30246
Malicious code in bioql PyPI...
CVE-2025-3873
The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...
CVE-2025-3873 Buffer overflow in Si91x crypto APIs
The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...
Silicon SiWx91x 安全漏洞
The Silicon SiWx91x is a radio board from Silicon Technology Silicon. A security vulnerability exists in the Silicon SiWx91x prior to version 3.4.0, which stems from the slsi91xaes, slsi91xgcm, slsi91xccm, and slsi91xsha APIs failing to check the size of the caller's output buffer, which could...