1410 matches found
ROS-20250819-05
Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of restricted directory. Python programming language interpreter CPython functions TarFile.extractall and...
ROS-20250819-06
Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of restricted directory. Python programming language interpreter CPython functions TarFile.extractall and...
Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: Updated to go1.24.6 released 2025-08-06 bsc1236217: - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go bsc1246118 - CVE-2025-47906: Fixed incorrect expansion of "", "." and ".." in some PATH...
SUSE-SU-2025:02837-1 Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: Updated to go1.24.6 released 2025-08-06 bsc1236217: - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go bsc1246118 - CVE-2025-47906: Fixed incorrect expansion of '', '.' and '..' in some PATH...
Linux Distros Unpatched Vulnerability : CVE-2020-25682
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them...
USN-7698-1 openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. CVE-2020-36221 It was discovered that OpenLDAP incorrectly handled saslAuthzTo processing. A...
SUSE-SU-2025:02812-1 Security update for go1.23-openssl
This update for go1.23-openssl fixes the following issues: Updated to go1.23.12 released 2025-08-06 bsc1229122: - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go bsc1246118 - CVE-2025-47906: Fixed incorrect expansion of '', '.' and '..' in some PATH...
MAL-2025-27076 Malicious code in nanotechnology-mini-css-extract-plugin-sociobiology-superagent (npm)
The package nanotechnology-mini-css-extract-plugin-sociobiology-superagent was found to contain malicious code...
MAL-2025-26424 Malicious code in mini-css-extract-plugin-jabbah-sagitta-graphql (npm)
The package mini-css-extract-plugin-jabbah-sagitta-graphql was found to contain malicious code...
Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)
The package unuk-morgan-mini-css-extract-plugin-sync was found to contain malicious code...
Malicious code in nanotechnology-mini-css-extract-plugin-sociobiology-superagent (npm)
The package nanotechnology-mini-css-extract-plugin-sociobiology-superagent was found to contain malicious code...
Malicious code in enif-async-panspermia-mini-css-extract-plugin (npm)
The package enif-async-panspermia-mini-css-extract-plugin was found to contain malicious code...
MAL-2025-33004 Malicious code in server-mini-css-extract-plugin-orogeny-spawn (npm)
The package server-mini-css-extract-plugin-orogeny-spawn was found to contain malicious code...
MAL-2025-18287 Malicious code in dependencies-node-sass-arcturus-mini-css-extract-plugin (npm)
The package dependencies-node-sass-arcturus-mini-css-extract-plugin was found to contain malicious code...
MAL-2025-19658 Malicious code in enif-async-panspermia-mini-css-extract-plugin (npm)
The package enif-async-panspermia-mini-css-extract-plugin was found to contain malicious code...
MAL-2025-37883 Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)
The package unuk-morgan-mini-css-extract-plugin-sync was found to contain malicious code...
Malicious code in hugo-draco-mini-css-extract-plugin-paleoanthropology (npm)
The package hugo-draco-mini-css-extract-plugin-paleoanthropology was found to contain malicious code...
Malicious code in dependencies-node-sass-arcturus-mini-css-extract-plugin (npm)
The package dependencies-node-sass-arcturus-mini-css-extract-plugin was found to contain malicious code...