11780 matches found
RHEL 8 : gdk-pixbuf2 (RHSA-2025:14646)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14646 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits suc...
RHEL 8 : gdk-pixbuf2 (RHSA-2025:14618)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14618 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits suc...
Integer Overflow
executorch is vulnerable to integer overflow. The vulnerability is due to improper handling in model loading that causes smaller-than-expected memory allocation, which allows an attacker to achieve code execution or other malicious effects...
The vulnerability of Dell EMC AppSync’s data storage and protection software lies in its ability to allow unlimited loading of malicious files, enabling attackers to execute arbitrary code.
The vulnerability of the Dell EMC AppSync data storage and protection software is related to the unlimited download of malicious files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2025-58322
NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks...
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again
Pickle deserialization vulnerabilities have persisted throughout Python's history, remaining widely recognized yet unresolved. Due to its ability to transparently save and restore complex objects into byte streams, many AI/ML frameworks continue to adopt pickle as the model serialization protocol...
Linux Distros Unpatched Vulnerability : CVE-2022-0545
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacke...
Linux Distros Unpatched Vulnerability : CVE-2019-5051
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2image, version 2.0.4. A missing error handler can lead to a buffer...
The vulnerability in the web interface of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management software lies in the possibility of unlimited loading of malicious files. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...
Linux Distros Unpatched Vulnerability : CVE-2020-10289
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an acti...
The vulnerability of the Bootstrap Loading component in Cisco IOS XE operating systems allows a hacker to write arbitrary files.
The vulnerability of the Bootstrap Loading component in Cisco IOS XE operating systems is related to the improper validation of the specified input type. Exploiting this vulnerability allows an attacker to write arbitrary files...
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
Summary Using asyncio.unixevents.UnixSubprocessTransport.start function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...
GHSA-J343-8V2J-FF7W Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand
Summary Using idlelib.pyshell.ModifiedInterpreter.runcommand function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity
Summary Using idlelib.calltip.getentity function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.calltip.getentity function in reduce method Then whe...
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
Summary Using idlelib.autocomplete.AutoComplete.getentity, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.autocomplete.AutoComplete.getentity functio...
GHSA-3VG9-H568-4W9M Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Summary Using idlelib.debugobj.ObjectTreeItem.SetText, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.debugobj.ObjectTreeItem.SetText function in...
Moderate: Red Hat Security Advisory: gdk-pixbuf2 security update
An update for gdk-pixbuf2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...
Moderate: Red Hat Security Advisory: gdk-pixbuf2 security update
An update for gdk-pixbuf2 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
python-cryptography: NULL-dereference when loading PKCS7 certificates
A null-pointer dereference vulnerability was found in python-cryptography during the loading of PKCS7 certificates. Invoking "loadpempkcs7certificates" or "loadderpkcs7certificates" can trigger this issue and lead to subsequent segmentation fault and result in a Denial of Service DoS for any...
