9167 matches found
CVE-2025-62187
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
CVE-2025-62187
In Ankitects Anki prior to 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux because media file pathnames are not necessarily relative to the media folder. The vulnerability affects the media handling component and arises from impro...
Tesla Telematics Control Unit 安全漏洞
Tesla Telematics Control Unit is an in-vehicle communications and data management module from Tesla, Inc. A security vulnerability exists in Tesla Telematics Control Unit versions prior to v2025.14, which stems from an authentication bypass that could lead to arbitrary file writing and script...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xz (UTSA-2025-986157)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986157 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file nam...
EUVD-2025-32877
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680628)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680628 advisory. @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee tha...
CVE-2025-8406
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
EUVD-2023-36564
Malicious code in bioql PyPI...
EUVD-2022-28842
Malicious code in bioql PyPI...
EUVD-2025-22157
Malicious code in bioql PyPI...
EUVD-2023-35042
Malicious code in bioql PyPI...
EUVD-2022-49512
Malicious code in bioql PyPI...
EUVD-2023-0151
Malicious code in bioql PyPI...
EUVD-2025-29617
Malicious code in bioql PyPI...
EUVD-2021-7271
Malicious code in bioql PyPI...
EUVD-2024-2001
Malicious code in bioql PyPI...
EUVD-2024-0460
Malicious code in bioql PyPI...
EUVD-2024-45525
Malicious code in bioql PyPI...