24872 matches found
GNU GRUB 安全漏洞
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that stems from improper handling of USB device string conversion, which could result in a denial of service or data corruption...
CVE-2025-64076
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
curl: Off-by-One Buffer Overflow in SMB Path Handler
Summary Found an off-by-one buffer overflow in lib/smb.c when handling SMB file paths. The bounds check uses instead of =, allowing a path of exactly 1023 bytes to overflow the 1024-byte buffer by one byte when the null terminator is added. Details File: lib/smb.c Function: smbsendopen Lines: 784...
OESA-2025-2686 python-ldap security update
python-ldap: python-ldap provides an object-oriented API to access LDAP directory servers from Python programs. Mainly it wraps the OpenLDAP 2.x libs for that purpose. Additionally the package contains modules for other LDAP-related stuff e.g. processing LDIF, LDAPURLs, LDAPv3 schema, LDAPv3...
The vulnerability of the strscpy() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the strscpy function in the Linux operating system’s kernel is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Cross-site Scripting (XSS)
Overview vega is a library that implements Vega visualization grammar. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the toString function in environments where the VEGADEBUG global variable is present. An attacker can execute arbitrary JavaScript code by...
Malicious code in tachyon-string-version-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fdfc74478a9afbba79d8616c10a0a83eb890f0f6898259eec91b20c796be2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176185
Malicious code in string-avior-heliophysics-tachyon npm...
EUVD-2025-176184
Malicious code in string-beta-benchmark-scale-file npm...
EUVD-2025-176182
Malicious code in string-container-benchmark-phi-cat npm...
EUVD-2025-176181
Malicious code in string-crust-exoplanet-centauri npm...
EUVD-2025-176180
Malicious code in string-deneb-string-spectroscopy npm...
EUVD-2025-176178
Malicious code in string-eslint-antd-cosmology npm...
EUVD-2025-176177
Malicious code in string-index-dog-abstract-simple npm...
EUVD-2025-176176
Malicious code in string-optimize-class-link-authorize npm...
EUVD-2025-176175
Malicious code in string-route-theta-virtualize-deserialize npm...
EUVD-2025-176174
Malicious code in string-version-oauth-epimetheus npm...
EUVD-2025-176075
Malicious code in tachyon-string-version-sequelize npm...