5929 matches found
CVE-2024-28607: Incorrect Behavior Order: Validate Before Canonicalize
The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...
CVE-2024-28607
The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...
PYSEC-2025-158
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated...
PT-2025-10578
Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical issue was found in the Open Asset Import Library Assimp, affecting the Assimp::GetNextLine function in the ParsingUtils.h library of the File Handler component. This issue...
Linux Distros Unpatched Vulnerability : CVE-2024-56433
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 through 165535 for the first user account that can...
MAL-2025-2159 Malicious code in @adminproxy/module-utils-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ab70491510a9c9834ba70e271572b29b68b7cb19d3a0511123f7d1aebc2b001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2023-4641
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-util...
Linux Distros Unpatched Vulnerability : CVE-2022-23639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to...
Linux Distros Unpatched Vulnerability : CVE-2022-0718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote in them cause incorrect masking in debug logs, causing any part of...
Linux Distros Unpatched Vulnerability : CVE-2022-27239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root...
Linux Distros Unpatched Vulnerability : CVE-2022-37601
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all...
Linux Distros Unpatched Vulnerability : CVE-2022-29869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...
Linux Distros Unpatched Vulnerability : CVE-2023-33551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap Buffer Overflow in the erofsfsckdirentiter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erof...
Linux Distros Unpatched Vulnerability : CVE-2017-1000487
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings. CVE-2017-1000487 Note...
Linux Distros Unpatched Vulnerability : CVE-2012-1586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which...
Linux Distros Unpatched Vulnerability : CVE-2014-2830
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have unspecified impact vi...
Linux Distros Unpatched Vulnerability : CVE-2018-10897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an...
Linux Distros Unpatched Vulnerability : CVE-2020-14342
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker...
MAL-2025-2020 Malicious code in vdkweb-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7836de93244912bbac99f38fc331aca106065b40e6eb6ba70cb26eff02acd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
