874 matches found
EUVD-2007-4435
Malware in sbrugna...
EUVD-2017-18210
Malware in sbrugna...
EUVD-2012-5016
Malware in sbrugna...
EUVD-2010-2213
Malware in sbrugna...
EUVD-2017-16275
Malware in sbrugna...
EUVD-2015-4763
Malware in sbrugna...
EUVD-2021-18314
Malware in sbrugna...
EUVD-2025-21408
Malicious code in bioql PyPI...
EUVD-2021-30897
Malicious code in bioql PyPI...
Gvariant deserialisation does not match spec for non-normal data
...
An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update.
...
SUSE-SU-2025:20824-1 Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: Fixed Out of bounds read for cookie path bsc1249191 - CVE-2025-10148: Predictable WebSocket mask bsc1249348 - Fix the --ftp-pasv option in curl v8.14.1 bsc1246197 - tooloperate: fix return code when --retry is used but not triggere...
CLSA-2025-1758300791 glibc: Fix of CVE-2019-9169
Fix spec-file for CVE-2019-9169...
CLSA-2025-1758228486 glibc: Fix of CVE-2019-9169
Fix spec-file for CVE-2019-9169...
The vulnerability of the `core_scsi3_decode_spec_i_port()` function in the `bnxt_re` component of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the corescsi3decodespeciport function in the Linux operating system’s SCSI component is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as `Content-Length: 1 2` to be interpreted as having a value of `12`. The HTTP specification does not allow for spaces in the `Content-Length` value and the Node.js HTTP parser has been brought into line on this particular difference. The security risk of this flaw to Node.js users is considered to be VERY LOW as it is difficult, and may be impossible, to craft an attack that makes use of this flaw in a way that could not already be achieved by supplying an incorrect value for `Content-Length`. Vulnerabilities may exist in user-code that make incorrect assumptions about the potential accuracy of this value compared to the actual length of the data supplied. Node.js users crafting lower-level HTTP utilities are advised to re-check the length of any input supplied after parsing is complete.
...
PT-2025-35660
Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Apr-2023 Release 1 Description: An error in the 3GPP specification implementation within the Exynos baseband allows for incorrect handling of unencrypted messages. Recommendations: Update to SMR Apr-2023...
Linux Distros Unpatched Vulnerability : CVE-2016-6299
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file. CVE-2016-6299...
Linux Distros Unpatched Vulnerability : CVE-2020-12457
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in wolfSSL before 4.5.0. It mishandles the changecipherspec CCS message processing logic for TLS 1.3. If an attacker sends...
