3241 matches found
EUVD-2021-3028
Malicious code in bioql PyPI...
EUVD-2021-3027
Malicious code in bioql PyPI...
EUVD-2021-3029
Malicious code in bioql PyPI...
EUVD-2021-3032
Malicious code in bioql PyPI...
EUVD-2021-3031
Malicious code in bioql PyPI...
EUVD-2021-3033
Malicious code in bioql PyPI...
EUVD-2022-52384
Malicious code in bioql PyPI...
EUVD-2022-32320
Malicious code in bioql PyPI...
EUVD-2022-0819
Malicious code in bioql PyPI...
EUVD-2022-1117
Malicious code in bioql PyPI...
EUVD-2023-0044
Malicious code in bioql PyPI...
EUVD-2021-3192
Malicious code in bioql PyPI...
CVE-2025-59344
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
CVE-2025-59344
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
CVE-2025-59344 AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
CVE-2025-59344 AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...
PT-2025-38575
Name of the Vulnerable Software and Affected Versions AliasVault API versions 0.23.0 and lower Description A server-side request forgery SSRF vulnerability exists in the favicon extraction feature. The extractor fetches a user-supplied URL, parses the returned HTML, and follows link rel="icon"...
ak-frame-extractor (>=1.0.0, <=1.1.0), systembridgebackend (>=3.0.0.dev1, <=3.0.7) +2 more potentially affected by CVE-2025-59042 via pyinstaller (5.0.1)
pyinstaller PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyinstaller and may be impacted: - ak-frame-extractor =1.0.0, =3.0.0.dev1, =3.0.0.dev1, =3.0.0.dev1, =3.0.7 Source cves: CVE-2025-59042 Source advisory: OSV:GHSA-P2XP-XX3R-M...
Linux Distros Unpatched Vulnerability : CVE-2019-2109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code...
Linux Distros Unpatched Vulnerability : CVE-2017-0592
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause...