10141 matches found
GHSA-CVX7-X8PJ-X2GW vulnerabilities
Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache...
GHSA-3749-GHW9-M3MG vulnerabilities
Vulnerabilities for packages: py3-torch-cuda-12.6, py3-torch-cuda-12.4...
GHSA-CVX7-X8PJ-X2GW vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache-fips, eks-distro, eks-distro-fips, kubernetes-dns-node-cache, juicefs...
CVE-2025-49140 vulnerabilities
Vulnerabilities for packages: ipfs-cluster-fips, k3s...
CVE-2025-2953 vulnerabilities
Vulnerabilities for packages: py3-torch-cuda-12.6, py3-torch-cuda-12.4...
CVE-2025-49007 vulnerabilities
Vulnerabilities for packages: logstash...
GHSA-47M2-26RW-J2JW vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, logstash, ruby3.3-rails...
CVE-2025-30399
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2025-49140
Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should...
CVE-2025-5914
A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...
CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
CVE-2025-5914
A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...
CVE-2025-5918
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memo...
CVE-2025-5917
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...
CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive WARC file that claims to have more than INT64MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow,...
CVE-2025-5915
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber LZSS window. This means the library may attempt to read beyond the allocated memory buffer, which can...
CVE-2025-4435 vulnerabilities
Vulnerabilities for packages: python...
GHSA-4G4G-FQW4-PRP2 vulnerabilities
Vulnerabilities for packages: python...