298 matches found
CVE-2025-12106
Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: SCTP: The initialization of additional fields in sctpv6fromsk was incorrect, leading to undefined behavior. SYZbot discovered that sin6scopeid was not properly initialized, causing undefined behavior. sin6scopeid and...
CVE-2025-47912 Insufficient validation of bracketed IPv6 hostnames in net/url
The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://::1/". IPv4 addresses and hostnames mus...
Exposure of Sensitive System Information to an Unauthorized Control Sphere
Overview std/net/url is a Go standard library package std/net/url Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere. Go Vulnerability Report:The Parse function permits values other than IPv6 addresses to be included in...
EUVD-2018-13266
Malware in sbrugna...
EUVD-2002-2177
Malware in sbrugna...
EUVD-2021-0142
Malware in sbrugna...
EUVD-2017-17251
Malware in sbrugna...
EUVD-2014-3624
Malware in sbrugna...
EUVD-2019-5219
Malware in sbrugna...
EUVD-2005-0022
Malware in sbrugna...
EUVD-2017-18428
Malware in sbrugna...
EUVD-2024-37232
Malicious code in bioql PyPI...
EUVD-2023-54650
Malicious code in bioql PyPI...
EUVD-2022-27375
Malicious code in bioql PyPI...
EUVD-2024-41742
Malicious code in bioql PyPI...
EUVD-2023-31829
Malicious code in bioql PyPI...
SUSE CVE-2025-9232
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
OpenSSL 3.4.0 < 3.4.3 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.4.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.4.3 advisory. - Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm...
SUSE CVE-2023-53189
In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconfmodrstimer, reference idev depends on whether rstimer is not pending. Then modify rstimer timeout. There is a time gap in 1, during which if the pending...