10694 matches found
curl: OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)
Summary: In curl’s OpenSSL backend, osslgetchannelbinding retains a new reference to the server’s X509 certificate via SSLget1peercertificate and never releases it. When Negotiate SPNEGO over TLS is in use, this path is invoked and leaks one X509 object per trigger. Over many requests in a...
ROS-20251006-02
A vulnerability in the curl program is related to boundary conditions when reading the cookie path. Exploitation The vulnerability could allow a remote attacker to cause a denial of service...
RLSA-2025:12187 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird: Incorrect URL stripping in CSP reports CVE-2025-80...
RockyLinux 9 : thunderbird (RLSA-2025:12187)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:12187 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefo...
EUVD-2024-46499
Malicious code in bioql PyPI...
EUVD-2023-31289
Malicious code in bioql PyPI...
EUVD-2023-53825
Malicious code in bioql PyPI...
EUVD-2022-4541
Malicious code in bioql PyPI...
EUVD-2024-26974
Malicious code in bioql PyPI...
EUVD-2025-16338
Malicious code in bioql PyPI...
EUVD-2019-15060
Malicious code in bioql PyPI...
EUVD-2023-32026
Malicious code in bioql PyPI...
EUVD-2023-32027
Malicious code in bioql PyPI...
EUVD-2022-45972
Malicious code in bioql PyPI...
EUVD-2022-53413
Malicious code in bioql PyPI...
EUVD-2025-1518
Malicious code in bioql PyPI...
EUVD-2022-4329
Malicious code in bioql PyPI...
EUVD-2025-29014
Malicious code in bioql PyPI...