13556 matches found
Updated ruby-rack packages fix security vulnerabilities
Possible Log Injection in Rack::CommonLogger. CVE-2025-25184 Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection. CVE-2025-27111 Local File Inclusion in Rack::Static. CVE-2025-27610...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in cbre-flow-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947d73050012f020f6fdd2335ac7c8602c707fb84fb141fbfdd1e88a30ca3650 The package cbre-flow-common was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198601
Malicious code in cbre-flow-common npm...
MAL-2025-190623 Malicious code in cbre-flow-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947d73050012f020f6fdd2335ac7c8602c707fb84fb141fbfdd1e88a30ca3650 The package cbre-flow-common was found to contain malicious code. Source: ossf-package-analysis...
LLM-CSEC: Empirical Evaluation of Security in C/C++ Code Generated by Large Language Models
The security of code generated by large language models LLMs is a significant concern, as studies indicate that such code often contains vulnerabilities and lacks essential defensive programming constructs. This work focuses on examining and evaluating the security of LLM-generated code,...
OpenSCAP Libraries 1.4.3
The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...
The vulnerability of the setup_smap() function in the arch/x86/kernel/cpu/common.c module on the x86 kernel-based Linux operating system allows a attacker to compromise the accessibility of protected information.
The vulnerability of the setupsmap function in the arch/x86/kernel/cpu/common.c module on the x86 kernel of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected...
CVE-2025-13136
creationtimestamp| type| source ---|---|--- 2025-11-22 09:19:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m67hqdgiui2k...
CVE-2025-11936
Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to...
delve and golang security update
An update is available for golang, delve. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Go Programming Language. Security Fixes: golang: archive/tar:...
JLSEC-2025-212 An issue was discovered in Mbed TLS before 2.24.0
An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name the cn argument of mbedtlsx509crtverify with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to an...
AZL-70660 CVE-2025-40210 affecting package kernel for versions less than 6.6.112-1
In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...
CVE-2025-12135
creationtimestamp| type| source ---|---|--- 2025-11-21 10:25:17+00:00| seen| https://gist.github.com/Darkcrai86/ed1fb6823be559a18a6bb36e28b17111...
CVE-2025-64524 CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault...
CVE-2025-64984
creationtimestamp| type| source ---|---|--- 2025-11-20 11:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m62ntbb3hw2j...
CVE-2025-64767
creationtimestamp| type| source ---|---|--- 2025-11-19 22:23:43+00:00| published-proof-of-concept| https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4 2025-11-21 19:52:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m662o4dcbv2q 2025-11-22 01:34:02+00:00|...
Cross-site Scripting (XSS)
org.opencastproject:opencast-common is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unfiltered rendering of user-supplied metadata in the paella player, which allows an attacker with write access to inject malicious HTML or JavaScript that executes in viewers’ browsers...
