Lucene search
K

3140 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 12:38 p.m.5 views

Malicious code in crypto-addr-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900adb7a0d7713cca5ccdc793971f3489553656e4e132b80293ad56c55d05b2a The package crypto-addr-codec was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References4
OSV
OSV
added 2025/11/24 12:38 p.m.1 views

MAL-2025-190694 Malicious code in crypto-addr-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900adb7a0d7713cca5ccdc793971f3489553656e4e132b80293ad56c55d05b2a The package crypto-addr-codec was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References4
NVD
NVD
added 2025/11/21 10:16 p.m.5 views

CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS0.00273EPSS
Exploits0References2
OSV
OSV
added 2025/11/21 10:16 p.m.3 views

DEBIAN-CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS5.3AI score0.00273EPSS
Exploits0References1
OSV
OSV
added 2025/11/21 10:16 p.m.2 views

ALPINE-CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS6.8AI score0.00273EPSS
Exploits0References1
OSV
OSV
added 2025/11/21 10:16 p.m.4 views

UBUNTU-CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS5.7AI score0.00273EPSS
Exploits0References4
EUVD
EUVD
added 2025/11/21 9:36 p.m.3 views

EUVD-2025-198513

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS6.4AI score0.00273EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/11/21 9:36 p.m.3 views

CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS5.3AI score0.00273EPSS
Exploits0
OSV
OSV
added 2025/11/21 9:36 p.m.4 views

CVE-2025-65102 PJSIP is vulnerable to buffer overflow in Opus PLC

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS6.8AI score0.00273EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2025/11/21 9:36 p.m.7 views

CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

8.7CVSS7AI score0.00273EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.3 views

PT-2025-47808

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.16 Description PJSIP is a multimedia communication library. Versions before 2.16 may experience a memory overwrite issue when using the Opus audio codec in receiving direction. This occurs because Opus PLC may zero-fi...

8.7CVSS6.6AI score0.00273EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.3 views

TencentOS Server 4: gstreamer1-plugins-bad-free (TSSA-2025:0408)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0408 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

8.8CVSS8.5AI score0.00708EPSS
Exploits0References2
Atlassian
Atlassian
added 2025/11/14 6:27 p.m.13 views

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2025-55163 was introduced in 9.12.1, 9.12.2, 9.12.3, 9.12.4, 9.12.5, 9.12.6, 9.12.7, 9.12.8, 9.12.9, 9.12.10, 9.12.11, 9.12.12, 9.12.13, 9.12.14, 9.12.15, 9.12.16, 9.12.17, 9.12.18, 9.12.19, 9.12.22, 9.12.23, 9.12.24, 9.12.25,...

8.2CVSS5.8AI score0.00979EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2025/11/14 12:23 a.m.1 views

SUSE CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

6.5AI score0.0015EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-40208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom- iris aa00000.video-codec: Direct firmware load for...

5.8AI score0.0015EPSS
Exploits0References2
OSV
OSV
added 2025/11/12 10:15 p.m.1 views

DEBIAN-CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

5.2AI score0.0015EPSS
Exploits0References1
NVD
NVD
added 2025/11/12 10:15 p.m.5 views

CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

0.0015EPSS
Exploits0References2
OSV
OSV
added 2025/11/12 10:15 p.m.3 views

UBUNTU-CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

5.7AI score0.0015EPSS
Exploits0References10
Cvelist
Cvelist
added 2025/11/12 9:56 p.m.5 views

CVE-2025-40208 media: iris: fix module removal if firmware download failed

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

0.0015EPSS
Exploits0References2
OSV
OSV
added 2025/11/12 9:56 p.m.4 views

CVE-2025-40208 media: iris: fix module removal if firmware download failed

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

6.3AI score0.0015EPSS
Exploits0References5
Rows per page
Query Builder