4113 matches found
EUVD-2015-8221
Malware in sbrugna...
EUVD-2019-0162
Malware in sbrugna...
EUVD-2017-15263
Malware in sbrugna...
PT-2025-41215
Name of the Vulnerable Software and Affected Versions pdfmake affected versions not specified Liferay Portal affected versions not specified Description A cross-site scripting issue exists in Liferay Portal. A resource allocation issue without limits or throttling exists in pdfmake. Recommendatio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-commons-fileupload (UTSA-2025-279266)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-279266 advisory. Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons...
PT-2025-41012
Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.19 Rack versions prior to 3.1.17 Rack versions prior to 3.2.2 Description Rack is a modular Ruby web server interface. The Rack::Multipart::Parser component does not limit the size of the multipart preamble,...
CVE-2025-11362: Allocation of Resources Without Limits or Throttling
Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throttling via repeatedly redirect URL in file embedding. An attacker can cause the application to crash or become unresponsive by providing crafted input that...
Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
Summary Rack::Multipart::Parser stores non-file form fields parts without a filename entirely in memory as Ruby String objects. A single large text field in a multipart/form-data request hundreds of megabytes or more can consume equivalent process memory, potentially leading to out-of-memory OOM...
AZL-75167 CVE-2025-39940 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...
CVE-2025-39940
In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...
CVE-2025-39940 dm-stripe: fix a possible integer overflow
In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked integer overflow that could result in improperly set I/O limits...
EUVD-2023-28618
Malicious code in bioql PyPI...
EUVD-2024-37625
Malicious code in bioql PyPI...
EUVD-2025-24978
Malicious code in bioql PyPI...
EUVD-2022-24872
Malicious code in bioql PyPI...
EUVD-2025-29400
Malicious code in bioql PyPI...
EUVD-2024-2886
Malicious code in bioql PyPI...