437 matches found
EUVD-2022-29907
Malicious code in bioql PyPI...
EUVD-2021-8025
Malicious code in bioql PyPI...
EUVD-2023-57598
Malicious code in bioql PyPI...
EUVD-2022-34144
Malicious code in bioql PyPI...
EUVD-2022-34151
Malicious code in bioql PyPI...
EUVD-2023-57599
Malicious code in bioql PyPI...
EUVD-2022-46692
Malicious code in bioql PyPI...
EUVD-2022-43377
Malicious code in bioql PyPI...
PT-2025-38522
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCPU, Q06UDPVCPU, Q13UDPVCPU, and Q26UDPVCPU with serial numbers starting with "24082" through "27081" Description An improper handlin...
Update your browser: Security fix for Chrome zero-day CVE-2025-10585
News, Security Update your browser: Security fix for Chrome zero-day CVE-2025-10585 Share September 18th, 2025 Hi everyone! The latest patches to Opera, Opera GX, Opera Air, and Opera for Android address several recent vulnerabilities, including a zero-day exploit CVE-2025-10585. We recommend...
Malicious code in gx-ui-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd19f4cdc84c6328351c4c3bda0cd8bde0ae5d9ed6b743d85a70f6a50670c6a1 The OpenSSF Package Analysis project identified 'gx-ui-common' @ 1.2.66 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41446 Malicious code in gx-ui-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd19f4cdc84c6328351c4c3bda0cd8bde0ae5d9ed6b743d85a70f6a50670c6a1 The OpenSSF Package Analysis project identified 'gx-ui-common' @ 1.2.66 npm as malicious. It is considered malicious because: - The package...
Mechrevo Control Center GX V2 安全漏洞
Mechrevo Control Center GX V2 is a system level control software from China-based Mechrevo. A security vulnerability exists in Mechrevo Control Center GX V2 version 5.56.51.48, which originates from an uncontrolled search path in the component Powershell Script Handler...
RockyLinux 9 : freetype (RLSA-2025:3407)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3407 advisory. freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files CVE-2025-27363 Tenable has extracted the...
RockyLinux 8 : freetype (RLSA-2025:3421)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3421 advisory. freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files CVE-2025-27363 Tenable has extracted the...
RLSA-2025:3407 Important: freetype security update
FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently. Security Fixes: freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files...
RLSA-2025:3421 Important: freetype security update
FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently. Security Fixes: freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files...
Update your browser: Security fix for Chrome zero-day CVE-2025-6558
News, Security Update your browser: Security fix for Chrome zero-day CVE-2025-6558 Share July 17th, 2025 Hi everyone! The latest patches to the Opera, Opera GX, and Opera Air address several recent vulnerabilities, including a zero-day exploit CVE-2025-6558. We recommend updating your browsers to...
Update your browser: Security fix for Chrome zero-day CVE-2025-6554
News, Security Update your browser: Security fix for Chrome zero-day CVE-2025-6554 Share July 3rd, 2025 Hi everyone! The latest patches to the Opera, Opera GX, Opera Air, and Opera for Android address several recent vulnerabilities, including a zero-day exploit CVE-2025-6554. We recommend updatin...
freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files
A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...