8853 matches found
MAL-2025-40341 Malicious code in yarn-design-system-rc-slider (npm)
The package yarn-design-system-rc-slider was found to contain malicious code...
MAL-2025-9110 Malicious code in @mylong.io/jackson-candidate-app (npm)
The package @mylong.io/jackson-candidate-app was found to contain malicious code...
MAL-2025-6989 Malicious code in 2.9.1-genesis-bugs-rc1 (npm)
The package 2.9.1-genesis-bugs-rc1 was found to contain malicious code...
CVE-2025-8846
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parseline of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...
Improper Check for Unusual or Exceptional Conditions
Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the constant hits to the server webhook endpoint with an invalid request body. An attacker can cause the plugin to crash by repeatedly sending invalid request bodies to the...
CVE-2012-10039 ZEN Load Balancer Filelog Command Execution
ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...
PT-2025-32552 · Unknown +1 · Zen Load Balancer +2
Name of the Vulnerable Software and Affected Versions: ZEN Load Balancer versions 2.0 ZEN Load Balancer version 3.0-rc1 Description: ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection issue in the content2-2.cgi file. The filelog parameter is passed directly to an exec call...
Linux Distros Unpatched Vulnerability : CVE-2024-35811
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: Fix use-after-free bug in brcmfcfg80211detach This is the candidate patch of CVE-2023-47233 : https://nvd.nist.gov/vuln/detail/CVE-2023-47233 I...
Linux Distros Unpatched Vulnerability : CVE-2025-21866
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VMALLOC Erhard reported the following KASAN hit while booting his PowerMac G4 with a...
CVE-2023-32256
The CVE-2023-32256 entry describes a race condition in the Linux kernel ksmbd component where a race between smb2 close and logoff on multichannel connections can cause a use-after-free. This affects the Linux kernel ksmbd implementation; the vulnerability details include the potential for a secu...
SUSE CVE-2025-8263
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-8263
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-29630
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue; there is no indication that an applicable SSH private key has ever been compromised. Notes: none...
CVE-2015-0842
The vulnerability CVE-2015-0842 affects yubiserver prior to version 0.6. The issue is a SQL injection in the server that can lead to an authentication bypass. The available documents confirm the affected software/component and the underlying cause (SQL injection) and indicate a potentially severe...
CVE-2014-7210
CVE-2014-7210 concerns PowerDNS (pdns) in Debian prior to 3.3.1-1. The issue is that the mysqldb backend’s maintainer scripts grant overly broad permissions to the pdns user, yielding a too-privileged MySQL user. Other backends are not affected. Connected sources confirm the Debian advisory conte...
Shrinking the Generation-Verification Gap with Weak Verifiers
Verifiers can improve language model capabilities by scoring and ranking responses from generated candidates. Currently, high-quality verifiers are either unscalable e.g., humans or limited in utility e.g., tools like Lean. While LM judges and reward models have become broadly useful as...
XWiki Platform 安全漏洞
XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions 10.9 through 16.4.6, 16.5.0-rc-1 through 16.10.2, and 17.0.0-rc-1, which stems from a REST API-accessible page header that could le...
PT-2025-25365 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability issue was reported, but the reason for rejection is that the candidate number was issued in error. All references and descriptions related to this issue have been removed to...
