3431 matches found
ROOT-APP-GOBINARY-CVE-2024-45337 CVE-2024-45337 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2024-45337 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root
Root has patched CVE-2026-66034 in the libssh2 package for Root:Alpine:3.22. Multiple fixed versions available...
CVE-2025-1302_jsonpath-plus_RCE
CVE-2025-1302 JSONPath-Plus RCE PoC PoC脚本名称： poc.py 这是一个针对CVE-2025-1302的概念验证漏洞利用脚本，该漏洞影响jsonpath-plus库中的RCE漏洞。当对存在漏洞的服务端点运行时，该脚本尝试通过JSONPath负载触发远程代码执行，并建立反向Shell连接到攻击者。 功能特性 灵活的HTTP方法 ：通过 --method 或 --no-fallback 标志支持 POST 、GET 或 AUTO （POST 并回退到 GET）。 自定义负载 ：从文件中加载一个或多个 JSONPath RCE 负载模板，支持 ip 和...
ROOT-APP-NPM-CVE-2026-65902 CVE-2026-65902 in dompurify - Patched by Root
Root has patched CVE-2026-65902 in the dompurify package for Root:npm. Multiple fixed versions available...
DEBIAN-CVE-2026-61721
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loopstart and wsmp.looplength values to samples without calling fluidsamplevalidate or fluidsamplesanitizeloop. A crafted DLS file can place...
ROOT-OS-DEBIAN-13-CVE-2026-56373 CVE-2026-56373 in imagemagick - Patched by Root
Root has patched CVE-2026-56373 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...
Astra Linux – Vulnerability in sdl-image1.2
SDLimage is a library for loading images of various formats as SDL surfaces. In the dolayersurface function in src/IMGxcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without being validated against the colormap size cmnum. A crafted .xcf file with a smal...
Astra Linux – Vulnerability in libpng1.6
LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, there was an out-of-bounds read and write vulnerability in libpng’s ARM/AArch64 Neon-optimized palette expansion path. When...
Astra Linux – Vulnerability in libvpx
There is a heap overflow vulnerability in libvpx. Encoding a frame with dimensions larger than the originally configured size using VP9 may lead to a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or higher...
Astra Linux – Vulnerability in libde265
It was discovered that Libde265 v1.0.8 contains an unknown vulnerability through the ffhevcputhevcqpelh3v3sse function in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack using a specially crafted video file...
Astra Linux – Vulnerability in SOX
A heap buffer overflow vulnerability was discovered in sox, within the lsxreadbuf function at sox/src/formatsi.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure...
Astra Linux – Vulnerability in TIF format
LibTIFF 4.4.0 contains an out-of-bounds write vulnerability in TIFFmemcpy in libtiff/tifunix.c:346, when called from extractImageSection, located at tools/tiffcrop.c:6826. This vulnerability allows attackers to cause a denial-of-service attack through a crafted TIFF file. For users who compile...
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
ROOT-APP-COMPOSER-AIKIDO-2026-248927 AIKIDO-2026-248927 in magento/product-community-edition - Patched by Root
Root has patched AIKIDO-2026-248927 in the magento/product-community-edition package for Root:Composer. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-37901 CVE-2025-37901 in linux - Patched by Root
Root has patched CVE-2025-37901 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
MINI-H62M-6JG8-FMXP
Bulletin has no description...
@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)
phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...
@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62681 via orval (8.5.3)
orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-62681 Source advisory: OSV:GHSA-FG9P-MRXR-HVQ7...
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...