13092 matches found
EUVD-2019-5982
Malware in sbrugna...
EUVD-2019-11441
Malware in sbrugna...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php-pear (UTSA-2025-003055)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-003055 advisory. Tar.php in ArchiveTar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libarchive (UTSA-2025-986114)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986114 advisory. listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php-pear (UTSA-2025-003053)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-003053 advisory. ArchiveTar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack such as file:// to overwrite files can...
CVE-2025-8291: Improper Validation of Specified Index, Position, or Offset in Input
The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory EOCD Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create Z...
Python security vulnerabilities
Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python that stems from not validating the validity of the ZIP64 EOCD locator...
ZenML security vulnerabilities
ZenML is an extensible open source MLOps framework from ZenML Open Source for creating portable, production-ready machine learning pipelines. An input validation error vulnerability exists in ZenML version 0.83.1, which stems from the failure of the PathMaterializer class to effectively detect...
RLSA-2025:9431 Moderate: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...
RLSA-2025:14130 Important: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...
EUVD-2023-55791
Malicious code in bioql PyPI...
EUVD-2023-55789
Malicious code in bioql PyPI...
EUVD-2023-55792
Malicious code in bioql PyPI...
EUVD-2023-55794
Malicious code in bioql PyPI...
EUVD-2024-16953
Malicious code in bioql PyPI...
EUVD-2023-55790
Malicious code in bioql PyPI...
EUVD-2023-55798
Malicious code in bioql PyPI...
EUVD-2025-14003
Malicious code in bioql PyPI...