LlamaIndex 安全漏洞

LlamaIndex is a data framework for LLM applications from the LlamaIndex open source. A security vulnerability exists in LlamaIndex that stems from the defaultjsonalyzer function being susceptible to SQL injection attacks, which can lead to arbitrary file creation and denial of service attacks...

The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA)’s set of utilities is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability of the Intel Graphics Performance Analyzer Intel GPA utility is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-40590

An improper certificate validation vulnerability CWE-295 in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a...

PEcAn 安全漏洞

PEcAn is a predictive ecosystem analyzer from PEcAn Open Source. A security vulnerability exists in PEcAn version 1.8.0, which stems from a cross-site scripting vulnerability that could allow a remote attacker to execute arbitrary code via a specially crafted payload...

Malicious code in dir-size-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f803eeed1967e8ae2cd3095d6f293153fe8b5574bbef8aa2191c4b2f862658f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA) tool, related to deficiencies in access control, allows a malicious actor to trigger a service failure.

The vulnerability of the Intel Graphics Performance Analyzer Intel GPA lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux Distros Unpatched Vulnerability : CVE-2022-49254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in calctxv4l2initformats In...

Linux Distros Unpatched Vulnerability : CVE-2021-40524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Pure-FTPd before 1.0.50, an incorrect maxfilesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial ...

Malicious code in analyzer_plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 747a848e1740f146ea6c00cc1bcc451280f4685bd6cf84e635361504de761cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2090 Malicious code in analyzer_plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 747a848e1740f146ea6c00cc1bcc451280f4685bd6cf84e635361504de761cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set allows a perpetrator to enhance their privileges.

The vulnerability of Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-1300

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassin...

CVE-2025-1300

CVE-2025-1300 — Open redirect in CodeChecker web server . The issue is in the CodeChecker web server where insufficient protection against multiple slashes after the product name in the URL allows an open redirect, bypassing protections related to CVE-2021-28861. Affected software is CodeChecker ...

CVE-2025-1300 Open redirect in CodeChecker web server

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassin...

CVE-2025-1300 Open redirect in CodeChecker web server

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassin...

CVE-2025-1300 Open redirect in CodeChecker web server

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassin...

CVE-2022-49232

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpudmconnectoraddcommonmodes In amdgpudmconnectoraddcommonmodes, amdgpudmcreatecommonmode is assigned to mode and is passed to drmmodeprobedadd directly after that...

SUSE CVE-2022-49232

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpudmconnectoraddcommonmodes In amdgpudmconnectoraddcommonmodes, amdgpudmcreatecommonmode is assigned to mode and is passed to drmmodeprobedadd directly after that...

SUSE CVE-2022-49254

In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in calctxv4l2initformats In calctxv4l2initformats, devmkzalloc is assigned to ctx-activefmt and there is a dereference of it after that, which could lead to NULL pointer...

Recommended update for Maven

This update for Maven fixes the following issues: maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: Key changes across versions: Bug fixes and improved support of dynamic types Dependency upgrades ASM, Maven core, and notably the removal of commons-io Improved error handling by...