Lucene search
+L

1882 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/26 9:12 p.m.5 views

Malicious code in turborepo-tests-helpers (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSV
OSV
added 2025/07/26 9:12 p.m.3 views

MAL-2025-6320 Malicious code in turborepo-tests-helpers (npm)

The package communicates with a domain associated with malicious activity...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/07/23 2:15 p.m.6 views

ALPINE-CVE-2025-54090

A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue...

6.3CVSS7AI score0.00685EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/23 2:15 p.m.1 views

DEBIAN-CVE-2025-54090

A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue...

6.3CVSS7.5AI score0.00685EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/07/23 12:45 p.m.10 views

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

9.6CVSS7.6AI score0.00974EPSS
SaveExploits0References52
OSV
OSV
added 2025/07/23 12:43 p.m.6 views

SUSE-SU-2025:02491-1 Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 - CVE-2024-38824: Fixed directory...

9.6CVSS7AI score0.00974EPSS
SaveExploits0References26
OSV
OSV
added 2025/07/22 6:36 p.m.9 views

CLSA-2025-1753209406 glib2: Fix of CVE-2024-52533

CVE-2024-52533: gsocks4aproxy: fix a single byte buffer overflow in connect - Fix test failure in gdatetime...

9.8CVSS7.3AI score0.01263EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/22 6:12 p.m.7 views

CLSA-2025-1753207967 glib2: Fix of CVE-2024-52533

CVE-2024-52533: gsocks4aproxy: fix a single byte buffer overflow in connect - Fix test failure in gdatetime...

9.8CVSS7.3AI score0.01263EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/22 6:8 p.m.8 views

CLSA-2025-1753207715 glib2: Fix of CVE-2024-52533

CVE-2024-52533: gsocks4aproxy: fix a single byte buffer overflow in connect messages - Enable tests during build - Fix test failure in gdatetime...

9.8CVSS7.3AI score0.01263EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/07/17 12:0 a.m.7 views

Edimax IC-7100 RCE (CVE-2025-1316)

Edimax IC-7100 network cameras do not properly neutralize request. An attacker can create specially crafted requests to achieve remote code execution on the device. Note that Nessus has not tested for this issue and has relied only on the device's self-reported model number. %NASLMINLEVEL 80900 C...

9.8CVSS9.6AI score0.7227EPSS
SaveExploits2References3
Packet Storm News
Packet Storm News
added 2025/07/14 12:0 a.m.7 views

Optimal Debiased Inference on Privatized Data Via Indirect Estimation and Parametric Bootstrap

We design a debiased parametric bootstrap framework for statistical inference from differentially private data. Existing usage of the parametric bootstrap on privatized data ignored or avoided handling the effect of clamping, a technique employed by the majority of privacy mechanisms. Ignoring th...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/07/13 5:51 p.m.12 views

MAL-2025-191807 Malicious code in package-346234294 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c9741d027897445cdd34a40de0f592a42641170b88a9cbab6cee3dbaaeeedb39 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

7.4AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/07/07 12:0 a.m.9 views

Adaptive Variation-Resilient Random Number Generator for Embedded Encryption

With a growing interest in securing user data within the internet-of-things IoT, embedded encryption has become of paramount importance, requiring light-weight high-quality Random Number Generators RNGs. Emerging stochastic device technologies produce random numbers from stochastic physical...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/07/03 9:15 a.m.7 views

DEBIAN-CVE-2025-38103

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhidparse Update struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently...

7.1CVSS6.1AI score0.00179EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.11 views

UBUNTU-CVE-2025-38103

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhidparse Update struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently...

7.1CVSS6.5AI score0.00179EPSS
SaveExploits0References43
OSV
OSV
added 2025/07/02 1:4 p.m.3 views

SUSE-SU-2025:02201-1 Security update for clamav

This update for clamav fixes the following issues: ClamAV version 1.4.3: - CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability bsc1245054. - CVE-2025-20234: Vulnerability in Universal Disk Format UDF processing bsc1245055. Other bugfixes: - Fix a race condition between the mockup servers...

9.8CVSS7.3AI score0.0159EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.5 views

PT-2025-37214

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to file descriptor table allocations. When sysctl nr open is set to a very high value, processes attempting to use file descriptors near the...

5.5CVSS6.1AI score0.00166EPSS
SaveExploits0
SUSE Linux
SUSE Linux
added 2025/06/27 5:22 a.m.2 views

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: Update to version 20250416.02 bsc1244304, bsc1244503 defaultSleeper: tolerate 10% difference to reduce test flakiness Add output of some packagemanagers to the testdata from version 20250416.01 Refactor OS Info package from version...

7.1CVSS7.5AI score0.0029EPSS
SaveExploits0References8
Oracle linux
Oracle linux
added 2025/06/25 12:0 a.m.9 views

perl-File-Find-Rule security update

0.34-9 - Use 3 arg open in grep CVE-2011-10007 - Package tests...

8.8CVSS7.3AI score0.00762EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2025/06/25 12:0 a.m.8 views

weldr-client security update

35.12-4 - Bump release for y-stream AND z-stream building using centpkg build --rhel-target=zstream Related: RHEL-89344 35.12-3 - tests: OSTree does not support the qcow2 image type - Add test repositories for RHEL 9.6 and 9.7 - Rebuild for CVE-2025-22871 Resolves: RHEL-89344...

9.1CVSS7.4AI score0.00778EPSS
SaveExploits0
Rows per page
Query Builder