2171 matches found
Improper Session Invalidation
ethycafides is vulnerable to improper session invalidation. The vulnerability is due to active user sessions not being invalidated after an admin UI password change, which allows an attacker with previously obtained session tokens to maintain unauthorized access even after a password reset...
SUSE-SU-2025:03523-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - Add livepatch for CVE-2025-9230 bsc1250410. - Use strong externalization for ssl3setupreadbuffer and ssl3releasereadbuffer - Use strong externalization for osslstatemfatal. - Add livepatch for CVE-2024-4741 bsc1225552. - Drop...
curl: Apple SecTrust legacy path accepts untrusted certificates on pre-10.14 macOS/iOS when built with USE_APPLE_SECTRUST
Summary: When libcurl is built with USEAPPLESECTRUST and runs on Apple OS versions that lack SecTrustEvaluateWithError macOS 10.14 / iOS 12, the legacy verification path miscompares OSStatus to SecTrustResultType and never checks the SecTrust result. This can cause untrusted certificates to be...
CVE-2025-61770
CVE-2025-61770 affects Rack’s multipart handling. In Rack versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser buffers the entire multipart preamble (bytes before the first boundary) in memory without a size limit, enabling a remote attacker to trigger large memory spikes and pote...
EUVD-2015-5238
Malware in sbrugna...
EUVD-2014-5240
Malware in sbrugna...
EUVD-2021-13083
Malware in sbrugna...
EUVD-2020-5562
Malware in sbrugna...
EUVD-2019-6245
Malware in sbrugna...
EUVD-2016-5796
Malware in sbrugna...
EUVD-2006-0211
Malware in sbrugna...
EUVD-2017-9697
Malware in sbrugna...
EUVD-2009-4633
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2025-987462)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987462 advisory. When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPTACCEPTENCODING option, using zlib 1.2.0.3 or older, a...
Unity Linux 20.1070a Security Update: rsync (UTSA-2025-984684)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984684 advisory. A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the oldcodec48 process when decoding SANM frames using run-length encoding, as the decoded data may exceed the allocated buffer size. An attacker can cause memory corruption or potentially execute arbitrary code b...
The vulnerability of the functions H5O_fill_new_decode and H5O_fill_old_decode in the H5Ofill.c component of the HDF file processing library allows a perpetrator to access confidential data and also cause service interruptions.
The vulnerability of the H5Ofillnewdecode and H5Ofillolddecode functions in the H5Ofill.c component of the HDF file processing library is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, as well as cause servi...
EUVD-2023-59795
Malicious code in bioql PyPI...