RHEL 10 : expat (RHSA-2025:19403)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19403 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocatio...

Node.js: Timeout-based race conditions make Uint8Array/Buffer.alloc non-zerofilled

A flaw in Node.js's buffer allocation logic was discovered, where buffers allocated with Buffer.alloc and other TypedArray instances like Uint8Array may contain leftover data from previous operations under specific timing conditions...

CVE-2025-10923

CVE-2025-10923 : GIMP WBMP File Parsing Integer Overflow Remote Code Execution vulnerability. The flaw arises from insufficient validation during WBMP parsing, causing an overflow when allocating a buffer and enabling code execution in the current process. Exploitation requires the target to visi...

EUVD-2018-8656

Malware in sbrugna...

EUVD-2018-17587

Malware in sbrugna...

EUVD-2018-1929

Malware in sbrugna...

EUVD-2018-8655

Malware in sbrugna...

EUVD-2007-6710

Malware in sbrugna...

EUVD-2015-2430

Malware in sbrugna...

EUVD-2025-27777

Malicious code in bioql PyPI...

PT-2025-40545

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.1 Description A flaw exists in Qsync Central where unrestricted resource allocation can occur. A remote attacker who obtains a user account may be able to prevent other systems, applications, or processes...

CVE-2025-59375

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing...

Linux Distros Unpatched Vulnerability : CVE-2018-20659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1-627. The AP4StcoAtom class in Core/Ap4StcoAtom.cpp has an attempted excessive memory allocation when called from...

Linux Distros Unpatched Vulnerability : CVE-2018-20186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1-627. AP4Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation,...

Linux Distros Unpatched Vulnerability : CVE-2024-25450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - imlib2 v1.9.1 was discovered to mishandle memory allocation in the function initimlibfonts. CVE-2024-25450 Note that Nessus relies on the presence of the packag...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the TIFFmallocExt, TIFFCheckRealloc, TIFFHashSetNew and InitCCITTFax3 functions of the tools/tiffcmp.c file. An attacker can cause resource exhaustion by repeatedly triggering the allocation of...

Linux Distros Unpatched Vulnerability : CVE-2018-5296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function base/PdfParser.cpp. Remote attackers could leverage th...

CVE-2024-4771

A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox 126...

CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

CVE-2013-3418

Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service memory consumption and process crash via crafted requests to the management interface, aka Bug ID CSCud22922...