2012 matches found
EUVD-2022-52614
Malicious code in bioql PyPI...
CVE-2025-34226 OpenPLC Runtime v3 Persistent DoS
OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...
CVE-2025-34226 OpenPLC Runtime v3 Persistent DoS
OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...
CVE-2025-54811 OpenPLC_V3
OpenPLCV3 has a vulnerability in the enipThread function that occurs due to the lack of a return value. This leads to a crash when the server loop ends and execution hits an illegal ud2 instruction. This issue can be triggered remotely without authentication by starting the same server multiple...
OpenPLC_V3
RISK EVALUATION Successful exploitation of this vulnerability could cause a denial of service, making the PLC runtime process crash. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...
CVE-2025-57424
A stored cross-site scripting XSS vulnerability exists in the MyCourts v3 application within the LTA number profile field. An attacker can insert arbitrary JavaScript into their profile, which executes in the browser of any user viewing it, including administrators. Due to the absence of the...
CVE-2025-57424
CVE-2025-57424: Stored XSS in MyCourts v3, via the LTA number profile field. An attacker can inject arbitrary JavaScript that runs in the browser of any viewer, including administrators. The absence of the HttpOnly flag on the session cookie could permit capture of session tokens and user session...
CVE-2025-29156
Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...
MAL-2025-44619 Malicious code in hongwan-juexing-v3 (npm)
The package hongwan-juexing-v3 was found to contain malicious code...
PT-2025-35874
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An out-of-bounds write issue exists in the wl cfgscan update v3 schedscan results function within wl cfgscan.c due to an incorrect bounds check. This could le...
Linux Distros Unpatched Vulnerability : CVE-2022-1664
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal...
Malicious code in node-fetch-v3 (npm)
The package node-fetch-v3 was found to contain malicious code...
SUSE-SU-2025:02998-1 Security update for ignition
This update for ignition fixes the following issues: - CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input bsc1248548...
Linux Distros Unpatched Vulnerability : CVE-2024-35226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. In affected versions template authors could...
CVE-2025-46407
A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the...
Linux Distros Unpatched Vulnerability : CVE-2021-37712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The npm package tar aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability...
Malicious code in op-payment-widget-v3 (npm)
The package op-payment-widget-v3 was found to contain malicious code...
Malicious code in dashboard-v3 (npm)
The package dashboard-v3 was found to contain malicious code...