10539 matches found
EUVD-2020-26980
Malware in sbrugna...
EUVD-2019-2212
Malware in sbrugna...
EUVD-2019-0798
Malware in sbrugna...
EUVD-2019-0805
Malware in sbrugna...
Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680628)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680628 advisory. @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee tha...
Tesla Telematics Control Unit security vulnerabilities
Tesla Telematics Control Unit is an in-vehicle communications and data management module from Tesla, Inc. A security vulnerability exists in Tesla Telematics Control Unit versions prior to v2025.14, which stems from an authentication bypass that could lead to arbitrary file writing and script...
CVE-2025-62187: Relative Path Traversal
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
CVE-2025-62187
In Ankitects Anki prior to 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux because media file pathnames are not necessarily relative to the media folder. The vulnerability affects the media handling component and arises from impro...
EUVD-2025-32877
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
CVE-2025-62187
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xz (UTSA-2025-986157)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986157 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file nam...
CVE-2025-8406
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
CVE-2025-8406: Improper Limitation of a Pathname to a Restricted Directory
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
CVE-2025-8917: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...
EUVD-2023-54920
Malicious code in bioql PyPI...
EUVD-2025-29391
Malicious code in bioql PyPI...
EUVD-2023-35042
Malicious code in bioql PyPI...
EUVD-2024-37842
Malicious code in bioql PyPI...