2842 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-25289
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation...
Linux Distros Unpatched Vulnerability : CVE-2020-11538
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than...
Linux Distros Unpatched Vulnerability : CVE-2022-24675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. CVE-2022-24675 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2023-2618
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, has been found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this issue is the function...
Linux Distros Unpatched Vulnerability : CVE-2019-20840
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...
Linux Distros Unpatched Vulnerability : CVE-2021-28676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an...
AZL-66410 CVE-2025-38528 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject %p% format string in bprintf-like helpers static const char fmt = "%p%"; bpftraceprintkfmt, sizeoffmt; The above BPF program isn't rejected and causes a kernel warning at runtime: Please remove unsupported %\x00 in...
CVE-2025-8760
A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64decode of the component fcgiserver. The manipulation of the argument Authorization leads to buffer overflow. It is possible to initiate the attack remotely...
Linux Distros Unpatched Vulnerability : CVE-2022-3109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointe...
Linux Distros Unpatched Vulnerability : CVE-2020-15106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file a...
SUSE CVE-2025-55197
pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are...
MAL-2025-23088 Malicious code in import-user-reject-decode-async (npm)
The package import-user-reject-decode-async was found to contain malicious code...
MAL-2025-16974 Malicious code in chi-notify-info-theta-decode (npm)
The package chi-notify-info-theta-decode was found to contain malicious code...
MAL-2025-32993 Malicious code in serialize-sudo-delta-sandbox-decode (npm)
The package serialize-sudo-delta-sandbox-decode was found to contain malicious code...
Malicious code in file-test-decode-balance-secure (npm)
The package file-test-decode-balance-secure was found to contain malicious code...
Malicious code in monitor-eta-decode-cold-assert (npm)
The package monitor-eta-decode-cold-assert was found to contain malicious code...
Malicious code in chi-notify-info-theta-decode (npm)
The package chi-notify-info-theta-decode was found to contain malicious code...
Malicious code in spy-promise-pi-decode-cold (npm)
The package spy-promise-pi-decode-cold was found to contain malicious code...
MAL-2025-37924 Malicious code in upsilon-decode-gamma-slow-report (npm)
The package upsilon-decode-gamma-slow-report was found to contain malicious code...
Malicious code in sigma-scale-fire-dog-decode (npm)
The package sigma-scale-fire-dog-decode was found to contain malicious code...