com.liferay:com.liferay.frontend.js.aui.web (>=1.0.0, <=1.0.23), com.liferay:com.liferay.frontend.js.web (>=1.0.26, <=1.0.70) potentially affected by CVE-2025-43794 via com.liferay.portal:com.liferay.portal.impl (2.11.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.frontend.js.aui.web =1.0.0, =1.0.26, =1.0.70 Sourc...

Linux Distros Unpatched Vulnerability : CVE-2018-19761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an illegal address access at fromsixel.c function: sixeldecoderawimpl in libsixel 1.8.2 that will cause a denial of service. CVE-2018-19761 Note that...

Malicious code in dip-client-impl (npm)

The package dip-client-impl was found to contain malicious code...

MAL-2025-18466 Malicious code in dip-client-impl (npm)

The package dip-client-impl was found to contain malicious code...

Heap-based Buffer Overflow

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Heap-based Buffer Overflow via undozipimpl function during a write operation when decompressing ZIPS-packed deep scan-line EXR files. An attacker can write arbitrary data to...

CVE-2025-49847

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper trycopy in llama.cpp/src/vocab.cpp: llamavocab::impl::tokentopiece casts a ve...

CVE-2025-49847: Improper Restriction of Operations within the Bounds of a Memory Buffer

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper trycopy in llama.cpp/src/vocab.cpp: llamavocab::impl::tokentopiece casts a ve...

org.onosproject:onos-drivers-arista (>=1.7.0, <=1.8.9), org.onosproject:onos-drivers-ciena (>=1.7.0, <=1.8.9) +13 more potentially affected by CVE-2023-41591 via org.onosproject:onos-core-net (>=1.7.0, <=2.5.7-rc2)

org.onosproject:onos-core-net MAVEN version =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.8.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =3.0.0, =3.0.0, =3.0.0, =4.0.0 Source cves: CVE-2023-41591 Source advisory: SNYK:JAVA-ORGONOSPROJECT-10658543...

CVE-2025-0409

A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to...

CVE-2025-0408

A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the function LoosDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/LoosController.java. The manipulation of the argument loosName leads to sql injection. The attack may ...

CVE-2025-0406

A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/SubjectController.java. The manipulation of the argument subname leads to sql injection. It is possible to...

gymxmjpa 安全漏洞

gymxmjpa is a gym management system for liujianview individual developers. A security vulnerability exists in gymxmjpa version 1.0, which originates from an SQL injection vulnerability in the loosName parameter of the LoosDaoImpl function in the...

CVE-2024-12829

Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within...

ch.qos.logback:logback-access (0.9.11), ch.qos.logback:logback-classic (0.9.11) +2 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (0.9.11)

ch.qos.logback:logback-core MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.11 - ch.qos.logback:logback-classic 0.9.11 -...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +8 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.22)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - br.net.woodstock.rockframework:rockframework-struts2 =2.0.0, =1.2.4, =1.0-rc42, =1.0-rc42,...

io.jenkins.blueocean:blueocean-rest-impl (>=1.27.4, <=1.27.5.1), io.jenkins.plugins:cdevents (>=v0.1.0-draft6-16.v8ca_10874de34, <=1-24.v0250517580b_2) +6 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3659.v582dc37621d8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3659.v582dc37621d8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-rest-impl =1.27.4,...

io.jenkins.blueocean:blueocean-rest-impl (1.27.6) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3731.ve4b_5b_857b_a_d3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3731.ve4b5b857bad3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-rest-impl 1.27.6 Source cve...

io.jenkins.blueocean:blueocean-rest-impl (>=1.27.7, <=1.27.11) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3774.v4a_d648d409ce)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3774.v4ad648d409ce is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-rest-impl =1.27.7, =1.27.11...

io.jenkins.blueocean:blueocean-rest-impl (>=1.27.12, <=1.27.16), org.jenkins-ci.plugins.workflow:workflow-multibranch (783.787.v50539468395f) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3894.vd0f0248b_a_fc4)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3894.vd0f0248bafc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-rest-impl =1.27.12, =1.27.1...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...