9085 matches found
EUVD-2025-197818
Glob matches files using patterns the shell uses. From versions 10.3.7 to 11.0.3, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are used, matched filenames are passed ...
[SECURITY] Fedora 41 Update: xmedcon-0.25.3-1.fc41
This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...
[SECURITY] Fedora 42 Update: xmedcon-0.25.3-1.fc42
This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...
[SECURITY] Fedora 41 Update: luksmeta-10-1.fc41
LUKSMeta is a command line utility for storing small portions of metadata in the LUKSv1 header for use before unlocking the volume...
[SECURITY] Fedora 42 Update: luksmeta-10-1.fc42
LUKSMeta is a command line utility for storing small portions of metadata in the LUKSv1 header for use before unlocking the volume...
HSEC-2024-0002 out-of-bounds write when there are many bzip2 selectors
out-of-bounds write when there are many bzip2 selectors A malicious bzip2 payload may produce a memory corruption resulting in a denial of service and/or remote code execution. Network services or command line utilities decompressing untrusted bzip2 payloads are affected. Note that the exploitati...
[SECURITY] Fedora 43 Update: gh-2.83.0-1.fc43
A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...
EUVD-2025-176676
Malicious code in resolvers-heliophysics-apollo-cli npm...
EUVD-2025-179712
Malicious code in cli-webdriver-manager-lint-staged-auth npm...
EUVD-2025-180533
Malicious code in abiogenesis-cli-tachyon-miranda npm...
EUVD-2025-179649
Malicious code in command-leda-fetch-delphinus npm...
EUVD-2025-177452
Malicious code in oortcloud-chariklo-geoarchaeology-cli npm...
EUVD-2025-124648
Malicious code in nashira-config-fork-cli npm...
EUVD-2025-116360
Malicious code in auth0-cli-envconfig-capella npm...
EUVD-2025-123461
Malicious code in prettier-cli-css-minimizer-webpack-plugin-node-sass npm...
EUVD-2025-115297
Malicious code in cli-start-husky-pyxis npm...
[SECURITY] Fedora 42 Update: xen-4.19.3-8.fc42
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
The vulnerability of the jpegBase::readMetadata() function in the library and the command-line utility for managing image metadata from Exiv2 allows a attacker to cause a service failure.
The vulnerability of the jpegBase::readMetadata function in the Exiv2 library and command-line utilities for managing image metadata involves inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
