1327 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-38439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in...
CVE-2025-54175
QuickCMS.EXT is affected by a Reflected XSS in the sFileName parameter of the thumbnail viewer. The issue allows arbitrary JavaScript execution via a crafted URL. Only version 6.8 has been tested and confirmed vulnerable; other versions may also be affected. The vendor was notified but did not pr...
PT-2025-34052
Name of the Vulnerable Software and Affected Versions: QuickCMS.EXT version 6.8 QuickCMS.EXT affected versions not specified Description: QuickCMS.EXT is susceptible to a Reflected Cross-Site Scripting XSS issue within the thumbnail viewer functionality. An attacker can create a malicious URL tha...
CVE-2025-9165 LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak
A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is...
CVE-2025-38522: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent updatelockedrq calls with NULL rq Avoid invoking updatelockedrq when the runqueue rq pointer is NULL in the SCXCALLOP and SCXCALLOPRET macros. Previously, calling updatelockedrqNULL with preemption enabled coul...
Malicious code in luster-ext-env (npm)
The package luster-ext-env was found to contain malicious code...
Malicious code in h1-cli-ext-iam-project-select (npm)
The package h1-cli-ext-iam-project-select was found to contain malicious code...
h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-openapi-generator (1.0.1-alpha.1)
h1-cli-ext-root-openapi-generator NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-openapi-generator and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unkno...
h1-cli-device-browser (>=1.0.1-alpha.0, <=1.0.1-alpha.1), h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-iam-project-select (1.0.1-alpha.1)
h1-cli-ext-iam-project-select NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-iam-project-select and may be impacted: - h1-cli-device-browser =1.0.1-alpha.0, =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE...
MAL-2025-25699 Malicious code in luster-ext-env (npm)
The package luster-ext-env was found to contain malicious code...
Malicious code in mozaik-ext-git (npm)
The package mozaik-ext-git was found to contain malicious code...
Malicious code in az-ext (npm)
The package az-ext was found to contain malicious code...
MAL-2025-22081 Malicious code in h1-cli-ext-root-openapi-generator (npm)
The package h1-cli-ext-root-openapi-generator was found to contain malicious code...
MAL-2025-26780 Malicious code in mozaik-ext-jira-agile (npm)
The package mozaik-ext-jira-agile was found to contain malicious code...
Malicious code in ext-zip (npm)
The package ext-zip was found to contain malicious code...
Malicious code in mozaik-ext-jiraagile (npm)
The package mozaik-ext-jiraagile was found to contain malicious code...
MAL-2025-22082 Malicious code in h1-cli-ext-storage-vault (npm)
The package h1-cli-ext-storage-vault was found to contain malicious code...
Malicious code in @zalastax/nolb-ext_ (npm)
The package @zalastax/nolb-ext was found to contain malicious code...
h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)
h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...