2845 matches found
CVE-2025-62518 astral-tokio-tar Vulnerable to PAX Header Desynchronization
astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Bonds in WordPress Plugin Stockie Extra versions = 1.2.11...
WordPress Stockie Extra plugin <= 1.2.11 - Content Injection vulnerability
Content Injection vulnerability discovered by Bonds in WordPress Plugin Stockie Extra versions = 1.2.11...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987687)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987687 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on iextraisize in isalive syzbot found a f2fs bug: BUG: KASAN:...
CVE-2025-62419
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE...
WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Attesa Extra versions = 1.4.7...
CVE-2025-62419
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE...
CVE-2025-31718
In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
PT-2025-41625
Name of the Vulnerable Software and Affected Versions Unisoc modem firmware affected versions not specified Description Improper input validation within the modem processing routines can lead to a system crash. This flaw allows for remote escalation of privilege, enabling an attacker to execute...
vim security update
8.0.1763-21.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-21 - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal 2:8.0.1763-20 - fix issue...
Linux Distros Unpatched Vulnerability : CVE-2025-61774
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to...
CVE-2025-61774
PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...
EUVD-2012-5434
Malware in sbrugna...
EUVD-2005-1533
Malware in sbrugna...
EUVD-2016-1993
Malware in sbrugna...
EUVD-2019-6217
Malware in sbrugna...
EUVD-2018-20673
Malware in sbrugna...
EUVD-2021-12022
Malware in sbrugna...