12514 matches found
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: curl (UTSA-2025-987465)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987465 advisory. 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987455)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987455 advisory. 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987423)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987423 advisory. Insufficient escaping in the Copy as cURL feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox 141,...
curl: OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)
Summary: In curl’s OpenSSL backend, osslgetchannelbinding retains a new reference to the server’s X509 certificate via SSLget1peercertificate and never releases it. When Negotiate SPNEGO over TLS is in use, this path is invoked and leaks one X509 object per trigger. Over many requests in a...
ROS-20251006-02
A vulnerability in the curl program is related to boundary conditions when reading the cookie path. Exploitation The vulnerability could allow a remote attacker to cause a denial of service...
RLSA-2025:12187 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird: Incorrect URL stripping in CSP reports CVE-2025-80...
RockyLinux 9 : thunderbird (RLSA-2025:12187)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:12187 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefo...
EUVD-2023-1920
Malicious code in bioql PyPI...
EUVD-2022-4541
Malicious code in bioql PyPI...
EUVD-2025-29014
Malicious code in bioql PyPI...
EUVD-2023-32028
Malicious code in bioql PyPI...
EUVD-2023-32027
Malicious code in bioql PyPI...
EUVD-2024-26974
Malicious code in bioql PyPI...
EUVD-2025-1518
Malicious code in bioql PyPI...
EUVD-2023-0870
Malicious code in bioql PyPI...
EUVD-2023-53825
Malicious code in bioql PyPI...
EUVD-2021-7242
Malicious code in bioql PyPI...
EUVD-2022-2735
Malicious code in bioql PyPI...