27717 matches found
GIMP Use-After-Free DoS
The vulnerability of the GIMP graphic editor is related to the use of memory after it is freed during the processing of XCF format files. Exploiting this vulnerability can allow an attacker to cause a system failure...
Linux Distros Unpatched Vulnerability : CVE-2025-38226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern...
HCL BigFix SaaS Authentication Service has security vulnerabilities
HCL BigFix SaaS Authentication Service is an endpoint management platform from HCL India. A security vulnerability exists in HCL BigFix SaaS Authentication Service that stems from the image upload feature not adequately validating the image format, which could lead to cross-site scripting attacks...
PT-2025-33486 · Autodesk · Autocad
Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can trigger an Out-of-Bounds Read issue. A malicious actor can exploit this to cause a crash, read...
Linux Distros Unpatched Vulnerability : CVE-2019-11719
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When importing a curve25519 private key in PKCS8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services...
PT-2025-33487 · Autodesk · Autocad
Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can trigger an uninitialized variable issue. A malicious actor can leverage this to cause a crash, read...
Malicious code in @zalastax/nolb-json-x (npm)
The package @zalastax/nolb-json-x was found to contain malicious code...
Malicious code in style-format (npm)
The package style-format was found to contain malicious code...
Malicious code in bb-babelfish-format (npm)
The package bb-babelfish-format was found to contain malicious code...
Malicious code in new-format (npm)
The package new-format was found to contain malicious code...
brick-node (>=0.0.0, <=0.0.17), change-object (0.0.0) +8 more potentially affected by unknown CVE via stream-format (0.0.3)
stream-format NPM version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on stream-format and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-34079...
alert (>=0.0.0, <=0.0.1), background-image (0.0.0) +40 more potentially affected by unknown CVE via new-format (>=0.0.1, <=2.0.0)
new-format NPM version =0.0.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.3.0, =0.0.0, =0.0.10, =0.0.0, =0.0.0, =0.0.0, =0.0.13 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27361...
Malicious code in browser-html-to-rtf (npm)
The package browser-html-to-rtf was found to contain malicious code...
Malicious code in format-text (npm)
The package format-text was found to contain malicious code...
Malicious code in stream-format (npm)
The package stream-format was found to contain malicious code...
MAL-2025-34079 Malicious code in stream-format (npm)
The package stream-format was found to contain malicious code...
MAL-2025-34115 Malicious code in style-format (npm)
The package style-format was found to contain malicious code...
MAL-2025-34287 Malicious code in swicks (npm)
The package swicks was found to contain malicious code...