472 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-3907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OctoRPKI does not escape a URI with a filename containing .., this allows a repository to create a file, ex...
PT-2025-52446
Name of the Vulnerable Software and Affected Versions libnbd affected versions not specified Description A flaw exists in libnbd where a malicious actor could potentially achieve arbitrary code execution with the privileges of the user running libnbd. This is possible by convincing libnbd to open...
EUVD-2012-6602
Malware in sbrugna...
EUVD-2020-27395
Malware in sbrugna...
EUVD-2004-2299
Malware in sbrugna...
URI Credential Leakage Bypass
A vulnerability in the URI library bundled with Ruby allows sensitive user credentials such as usernames or passwords in a URI to be unintentionally leaked when combining URIs using the + operator. This issue bypasses the previous fix for CVE-2025-27221. The issue affects Ruby's built-in URI...
EUVD-2025-32590
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
EUVD-2025-27247
Malicious code in bioql PyPI...
EUVD-2024-22158
Malicious code in bioql PyPI...
EUVD-2022-42492
Malicious code in bioql PyPI...
EUVD-2025-7510
Malicious code in bioql PyPI...
EUVD-2025-25855
Malicious code in bioql PyPI...
The vulnerability of the Linux operating system’s kernel component tpm allows a hacker to trigger a service failure.
The vulnerability of the tpm component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `ethtool_cmis_module_poll()` function in the `net/ethtool/cmis_cdb.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ethtoolcmismodulepoll function in the net/ethtool/cmiscdb.c component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nfsd4_run_cb_work() function in the nfs4callback.c component of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the nfsd4runcbwork function in the nfs4callback.c component of the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause service failures...
SUSE-SU-2025:03244-1 Security update for raptor
This update for raptor fixes the following issues: - CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 - CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674...
CVE-2025-9161
A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution...
PT-2025-36730
Name of the Vulnerable Software and Affected Versions: FactoryTalk Optix affected versions not specified Description: A security issue exists in FactoryTalk Optix MQTT broker due to insufficient URI sanitization. This flaw allows the loading of remote Mosquito plugins, potentially leading to remo...
CVE-2025-0083
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CivetWeb 安全漏洞
CivetWeb is open source Civetweb an easy-to-use, powerful, C/C++ embeddable web server with optional CGI, SSL and Lua support. A security vulnerability exists in CivetWeb versions 1.14 through 1.16, which stems from a buffer overflow in the URI parser that could lead to remote code execution...