4847 matches found
BIT-NGINX-GATEWAY-2024-32760 NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause or other potential impact...
The vulnerability of the sixeldebug_print_palette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sixeldebugprintpalette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the...
Vulnerability of the dpu_encoder_helper_phys_cleanup() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in Linux kernels, which can be exploited by attackers to cause service failures.
Vulnerability of the dpuencoderhelperphyscleanup function in the drivers/gpu/drm/msm/disp/dpu1/dpuencoder.c module – The Linux kernel’s DRI support driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an...
The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform for training and applying neural networks in speech processing and natural language processing, allows a perpetrator to execute arbitrary code, gain unauthorized access to protected information, or replace data.
The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform used for training and applying neural networks in speech processing and natural language processing, relates to improper code generation management. Exploiting this vulnerability can allow attackers to genera...
PT-2025-51671
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the multiq3 driver related to configuration options within the multiq3 attach function. Syzbot identified that crafted configuration options,...
EUVD-2025-198699
Malicious code in @ensdomains/address-encoder npm...
Malicious code in @ensdomains/address-encoder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8264ecb2af0b5028f08af1a108f7fe73cd1cbe55ea2cb7102a3e28b2e1052e The package @ensdomains/address-encoder was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190665 Malicious code in @ensdomains/address-encoder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8264ecb2af0b5028f08af1a108f7fe73cd1cbe55ea2cb7102a3e28b2e1052e The package @ensdomains/address-encoder was found to contain malicious code. Source: ghsa-malware...
CVE-2025-63224
The Itel DAB Encoder IDEnc build 25aec8d is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...
TencentOS Server 4: ffmpeg (TSSA-2025:0714)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0714 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
CVE-2025-63224
The Itel DAB Encoder IDEnc build 25aec8d is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...
CVE-2025-63224
The Itel DAB Encoder IDEnc build 25aec8d is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...
Itel DAB Encoder 安全漏洞
Itel DAB Encoder is a device for broadcasting systems from Itel Italia. A security vulnerability exists in Itel DAB Encoder that stems from improper JWT authentication, which could lead to authentication bypass...
CVE-2025-63224
The Itel DAB Encoder (IDEnc build 25aec8d ) is vulnerable to an Authentication Bypass due to improper JWT validation across devices. An attacker who obtains a valid JWT token from one device can reuse that token to gain administrative access to any other device running the same firmware, even if ...
PT-2025-47471
Name of the Vulnerable Software and Affected Versions Itel DAB Encoder version 25aec8d Description The Itel DAB Encoder IDEnc build 25aec8d has a flaw in how it verifies JSON Web Tokens JWTs. This allows an attacker who has a valid JWT from one device to use it to gain administrative access to an...
CVE-2025-63224
The Itel DAB Encoder IDEnc build 25aec8d is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...
CVE-2025-63224: Improper Authentication
The Itel DAB Encoder IDEnc build 25aec8d is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...
Updated libvpx packages fix security vulnerability
Double-free in libvpx encoder. CVE-2025-5283...