6682 matches found
EUVD-2024-34446
Malicious code in bioql PyPI...
EUVD-2024-35232
Malicious code in bioql PyPI...
EUVD-2024-34667
Malicious code in bioql PyPI...
OSV-2025-797 Heap-buffer-overflow in ProcessRows
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447845730 Crash type: Heap-buffer-overflow WRITE Crash state: ProcessRows DecodeImageData VP8LDecodeImage...
OSV-2025-796 Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447958064 Crash type: Heap-buffer-overflow WRITE Crash state: AddGreenToBlueAndRedAVX2 VP8LInverseTransform ProcessRows...
OSV-2025-793 Heap-use-after-free in parse_from_header
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447719691 Crash type: Heap-use-after-free READ 8 Crash state: parsefromheader fuzzparsemsg.c parseheaders...
CVE-2025-58457
creationtimestamp| type| source ---|---|--- 2025-09-24 13:24:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/193 2026-06-18 19:11:29+00:00| seen| https://gist.github.com/ppkarwasz/f5be1b5c0182fe665252101c5f24d39f...
Malicious code in oss-fuzz (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea9bd1245381fc2e4b2f1e2d2ce20ef200636db74be623613eb4498ab3ea0ad Any computer that has this package installed or running should be considered...
MAL-2025-47407 Malicious code in oss-fuzz (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea9bd1245381fc2e4b2f1e2d2ce20ef200636db74be623613eb4498ab3ea0ad Any computer that has this package installed or running should be considered...
CVE-2025-8396
Temporal OSS Server is affected by CVE-2025-8396 due to insufficiently specific bounds checking on the authorization header, which can cause denial of service from Excessive memory allocation. Affected versions are OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 (fixed in those versions and later)...
Temporal OSS Server 安全漏洞
Temporal OSS Server is an open source workflow orchestration engine from Temporal. A security vulnerability exists in Temporal OSS Server versions prior to 1.26.3, prior to 1.27.3, and prior to 1.28.1, which stems from insufficient checking of authorization header boundaries and could lead to...
OSV-2025-723 Heap-buffer-overflow in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444547710 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processtls fuzzquicgetcryptodata.c...
Patch Tuesday - September 2025
Microsoft is addressing 176 vulnerabilities today, which seems like a lot, and it is. Curiously, Microsoft’s own Security Update Guide SUG for September 2025 Patch Tuesday only lists 86 vulns, and that’s because the SUG doesn’t include a large number of open source software OSS fixes published...
ossindex-maven-plugin
It is an offensive tool for dependency audit. The primary CVE ID is not present in the provided context. The target product/service or framework is Maven, and the vulnerability class/vector is dependency audit. Notable dependencies/tooling include the OSS Index REST API v2.0. The execution contex...
Linux Distros Unpatched Vulnerability : CVE-2025-29476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in compresschunkfuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before...
HPESBNW04941 Rev. 1 - HPE Telco Unified OSS Console, Multiple Vulnerabilities
Potential Security Impact: Local: Arbitrary Code Execution; Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console 3.1.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-52434 |...
PT-2025-34835 · Git · Json2Avro
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.mapOb...
OSV-2025-633 UNKNOWN WRITE in _lou_handlePassVariableAction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438413376 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...