2914 matches found
EUVD-2023-58738
Malicious code in bioql PyPI...
EUVD-2023-56297
Malicious code in bioql PyPI...
EUVD-2025-30202
Malicious code in bioql PyPI...
EUVD-2023-45714
Malicious code in bioql PyPI...
EUVD-2023-39722
Malicious code in bioql PyPI...
EUVD-2024-49607
Malicious code in bioql PyPI...
EUVD-2025-29645
Malicious code in bioql PyPI...
USN-7775-2 linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...
CVE-2025-59534
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in...
CVE-2025-59534
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in...
CVE-2025-59534
CryptoLib (NASA’s library using CCSDS SDLS-EP) contains a command-injection vulnerability in initialize_kerberos_keytab_file_login() present in versions prior to 1.4.2. The flaw arises from unsanitized, user-controlled input directly interpolated into a shell command and executed via system(), en...
PT-2025-39207
Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.2 Description CryptoLib is a software solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP for secure communications between spacecraft and ground stations. A command...
CryptoLib 操作系统命令注入漏洞
CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. An operating system command injection vulnerability exists in CryptoLib versions prior to 1.4.2, which stems from the initializekerberoskeytabfilelogin...
Imagination Graphics DDK 安全漏洞
Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in Imagination Graphics DDK, which originates from the possibility that an unprivileged user may execute an improper GPU system call, triggering a reuse-after-release kernel exception...
CVE-2025-26503
A crafted system call argument can cause memory corruption...
CVE-2025-34186
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...
CVE-2025-26503
A crafted system call argument can cause memory corruption...
CVE-2025-26503 Buffer manipulation
A crafted system call argument can cause memory corruption...
CVE-2025-26503
The CVE-2025-26503 entry maps to a memory corruption issue triggered by a crafted system call argument. Connected sources reference Wind River VxWorks 7 as the affected platform, with CVSSv3.1 metrics indicating Local attack vector, High privileges required, No user interaction, and Confidentiali...