5990 matches found
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-2124)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2024-37149
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An...
MONAI: Unsafe torch usage may lead to arbitrary code execution
Summary In modeldict = torch.loadfullpath, maplocation=torch.devicedevice, weightsonly=True in monai/bundle/scripts.py , weightsonly=True is loaded securely. However, insecure loading methods still exist elsewhere in the project, such as when loading checkpoints. This is a common practice when...
CVE-2025-58759 TinyEnv: Inline comments not stripped properly in .env values
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...
Denial Of Service (DoS)
org.bouncycastle, bc-fips is vulnerable to Denial Of Service DoS. The vulnerability is due to excessive allocation in the org.Bouncycastle.Crypto.Fips.NativeLoader module, which allows an attacker to exhaust system resources and cause a denial of service...
TinyEnv 安全漏洞
TinyEnv is an environment variable loader for Dat Duy Personal Developer. A security vulnerability exists in TinyEnv versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, which stems from a checking deficiency in the .env file that could lead to unsafe default configurations...
CVE-2025-32321
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-9365
Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code...
Malicious code in pipe-less-loader-fornax-regulus (npm)
The package pipe-less-loader-fornax-regulus was found to contain malicious code...
Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)
The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...
Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm)
The package style-loader-optimize-css-assets-webpack-plugin-octans-ursa was found to contain malicious code...
Malicious code in hercules-grus-css-loader-package (npm)
The package hercules-grus-css-loader-package was found to contain malicious code...
Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)
The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...
Malicious code in aether-venus-lacerta-less-loader (npm)
The package aether-venus-lacerta-less-loader was found to contain malicious code...
Malicious code in webdriver-manager-plutology-postcss-loader-meissa (npm)
The package webdriver-manager-plutology-postcss-loader-meissa was found to contain malicious code...
Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)
The package janus-react-bootstrap-less-loader-biomimicry was found to contain malicious code...
Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm)
The package deneb-socketio-sass-loader-rollup-plugin was found to contain malicious code...
MAL-2025-46153 Malicious code in style-loader-troposphere-speleology-link (npm)
The package style-loader-troposphere-speleology-link was found to contain malicious code...