236 matches found
UBUNTU-CVE-2025-14308
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This...
CVE-2025-12978 CVE-2025-12978
Fluent Bit inhttp, insplunk, and inelasticsearch input plugins contain a flaw in the tagkey validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed acces...
PT-2025-47924
Name of the Vulnerable Software and Affected Versions Fluent Bit in http, in splunk, and in elasticsearch input plugins affected versions not specified Description The input plugins in http, in splunk, and in elasticsearch within Fluent Bit have a flaw in how they validate the tag key. The...
Division by zero
Overview Affected versions of this package are vulnerable to Division by zero via the CLAHEImage function in MagickCore/enhance.c. An attacker can cause the process to crash or exhaust system resources by supplying crafted parameters or very small images that result in zero tile dimensions, leadi...
Amazon Linux 2023 : cuda-nsight-compute-13 (ALAS2023NVIDIA-2025-176)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-176 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...
CVE-2024-50571
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions,...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the elfx8664relocatesection function. An attacker can cause a heap-based buffer overflow by providing specially crafted input files during the linking process. Remediation A fix was pushed into the master...
EUVD-2014-8785
Malware in sbrugna...
EUVD-2021-0311
Malware in sbrugna...
EUVD-2013-4840
Malware in sbrugna...
EUVD-2020-10319
Malware in sbrugna...
EUVD-2021-15686
Malware in sbrugna...
EUVD-2006-1896
Malware in sbrugna...
Unity Linux 20.1070e Security Update: jython (UTSA-2025-984795)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984795 advisory. The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified...
EUVD-2025-6998
Malicious code in bioql PyPI...
EUVD-2022-47983
Malicious code in bioql PyPI...
EUVD-2024-54524
Malicious code in bioql PyPI...
EUVD-2021-28051
Malicious code in bioql PyPI...
EUVD-2023-36383
Malicious code in bioql PyPI...
Regular Expression Denial of Service (ReDoS)
Overview cattown is an A lightweight, pure JavaScript markdown parser with built-in HTML sanitization using DOMPurify. Converts markdown to clean, safe HTML with customizable styling. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via inefficient...