2461 matches found
MAL-2025-43433 Malicious code in alpha-kiwi-quince-osutd (npm)
The package alpha-kiwi-quince-osutd was found to contain malicious code...
MAL-2025-45478 Malicious code in orange-alpha-golf-vskhf (npm)
The package orange-alpha-golf-vskhf was found to contain malicious code...
Malicious code in golf-alpha-banana-oyueb (npm)
The package golf-alpha-banana-oyueb was found to contain malicious code...
OESA-2025-2196 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
Linux Distros Unpatched Vulnerability : CVE-2025-55004
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffe...
CVE-2025-58047
Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when...
CVE-2025-58047 Volto affected by possible DoS by invoking specific URL by anonymous user
Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when...
PT-2025-35112
Name of the Vulnerable Software and Affected Versions Volto versions 19.0.0-alpha.1 through 19.0.0-alpha.4 Volto versions 18.0.0 through 18.24.0 Volto versions 17.0.0 through 17.22.1 Volto versions prior to 16.34.0 Description Volto, a React-based frontend for the Plone Content Management System,...
ImageMagick < 7.1.2-1 Heap-Buffer Overflow (GHSA-cjc8-g9w8-chfw)
The remote host has a version of ImageMagick installed that is prior to 7.1.2-1. It is, therefore, affected by a vulnerability as referenced in GHSA-cjc8-g9w8-chfw advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1,...
imagemagick: heap-buffer overflow read in MNG magnification with alpha
Vulnerability Details When performing image magnification in ReadOneMNGIMage in coders/png.c, there is an issue around the handling of images with separate alpha channels. When loading an image with a color type that implies a separate alpha channel ie. jngcolortype = 12, we will load the alpha...
GHSA-CJC8-G9W8-CHFW imagemagick: heap-buffer overflow read in MNG magnification with alpha
Vulnerability Details When performing image magnification in ReadOneMNGIMage in coders/png.c, there is an issue around the handling of images with separate alpha channels. When loading an image with a color type that implies a separate alpha channel ie. jngcolortype = 12, we will load the alpha...
Linux Distros Unpatched Vulnerability : CVE-2017-12450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The alphavmsobjectp function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows...
Linux Distros Unpatched Vulnerability : CVE-2018-17613
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram Desktop aka tdesktop 1.3.16 alpha, when Use proxy is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol...
Medium: gstreamer1-plugins-base
Issue Overview: GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gstssaparseremoveoverridecodes function of the gstssaparse.c file. This function is responsible for parsing and removing SSA SubStation Alpha style...
Linux Distros Unpatched Vulnerability : CVE-2021-3421
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package ...
Malicious code in alpha-03t-project (npm)
The package alpha-03t-project was found to contain malicious code...
Malicious code in alpha-0ai-project (npm)
The package alpha-0ai-project was found to contain malicious code...
Malicious code in alpha-2wb-project (npm)
The package alpha-2wb-project was found to contain malicious code...