Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-15741

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.00986EPSS
Exploits0References15
Fedora
Fedora
added 2025/06/08 1:32 a.m.4 views

[SECURITY] Fedora 42 Update: mingw-libsoup-2.74.3-12.fc42

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

7.5CVSS6.7AI score0.00986EPSS
Exploits1
CVE
CVE
added 2025/05/19 5:3 p.m.62 views

CVE-2025-4945

Affects: libsoup HTTP library (GNOME ecosystem). Vulnerability: CVE-2025-4945 — in cookie handling, a crafted cookie expiration value can trigger an integer overflow during date arithmetic in the cookie parser, allowing undefined behavior and bypassing expiration logic. Root cause: improper valid...

3.7CVSS6.8AI score0.00296EPSS
Exploits0References16
OSV
OSV
added 2025/05/19 4:15 p.m.8 views

CVE-2025-4948

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS6.5AI score0.00986EPSS
Exploits0References15
NVD
NVD
added 2025/05/19 4:15 p.m.13 views

CVE-2025-4948

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS0.00986EPSS
Exploits0References15
NVD
NVD
added 2007/01/16 7:28 p.m.15 views

CVE-2006-5876

The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values...

7.8CVSS6.5AI score0.07492EPSS
Exploits0References16
Rows per page
Query Builder