6345 matches found
EUVD-2022-55080
Malicious code in bioql PyPI...
EUVD-2025-26981
Malicious code in bioql PyPI...
EUVD-2022-32736
Malicious code in bioql PyPI...
EUVD-2025-11175
Malicious code in bioql PyPI...
EUVD-2024-43996
Malicious code in bioql PyPI...
CVE-2025-10728
When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...
CVE-2025-10728 Uncontrolled recursion in Qt SVG module
When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...
CVE-2025-10728 Uncontrolled recursion in Qt SVG module
When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
...
CVE-2023-53467
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential leak in rtw89appendprobereqie Do kfreeskbnew before goto out to prevent potential leak...
CVE-2025-10948
A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...
CVE-2025-10948
A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...
CVE-2025-10948 MikroTik RouterOS libjson.so print parse_json_element buffer overflow
A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...
Arbitrary File Upload
xml2rfc is vulnerable to Arbitrary File Upload. The vulnerability is due to improper input sanitization because an attacker can inject a malicious element into the XML used to generate the PDF, causing the generator to read and include arbitrary filesystem files...
CVE-2025-9844
Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...
CVE-2025-9844
CVE-2025-9844 (Salesforce CLI on Windows) Affected software: Salesforce CLI (Salesforce) on Windows.Root cause: Uncontrolled Search Path Element that can lead to replacement of a trusted executable.Impact: Potential code execution through replacing a trusted executable; CVSS v3.1 base score 8.8 (...
Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal
Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the svg or math tag is allowed, because it relies on a tag being...
element-web-1.11.112-1.1 on GA media (moderate)
element-web-1.11.112-1.1 on GA media Announcement ID: openSUSE-SU-2025:15559-1 Rating: moderate Cross-References: CVE-2025-59161 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
CVE-2025-59332
3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the parser tag and the 3d parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The attributes are not sanitized, which means that...
