6927 matches found
MAL-2025-47407 Malicious code in oss-fuzz (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea9bd1245381fc2e4b2f1e2d2ce20ef200636db74be623613eb4498ab3ea0ad Any computer that has this package installed or running should be considered...
Malicious code in oss-fuzz (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea9bd1245381fc2e4b2f1e2d2ce20ef200636db74be623613eb4498ab3ea0ad Any computer that has this package installed or running should be considered...
CVE-2025-8396
Temporal OSS Server is affected by CVE-2025-8396 due to insufficiently specific bounds checking on the authorization header, which can cause denial of service from Excessive memory allocation. Affected versions are OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 (fixed in those versions and later)...
Temporal OSS Server 安全漏洞
Temporal OSS Server is an open source workflow orchestration engine from Temporal. A security vulnerability exists in Temporal OSS Server versions prior to 1.26.3, prior to 1.27.3, and prior to 1.28.1, which stems from insufficient checking of authorization header boundaries and could lead to...
OSV-2025-723 Heap-buffer-overflow in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444547710 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processtls fuzzquicgetcryptodata.c...
Patch Tuesday - September 2025
Microsoft is addressing 176 vulnerabilities today, which seems like a lot, and it is. Curiously, Microsoft’s own Security Update Guide SUG for September 2025 Patch Tuesday only lists 86 vulns, and that’s because the SUG doesn’t include a large number of open source software OSS fixes published...
ossindex-maven-plugin
It is an offensive tool for dependency audit. The primary CVE ID is not present in the provided context. The target product/service or framework is Maven, and the vulnerability class/vector is dependency audit. Notable dependencies/tooling include the OSS Index REST API v2.0. The execution contex...
Linux Distros Unpatched Vulnerability : CVE-2025-29476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in compresschunkfuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before...
HPESBNW04941 Rev. 1 - HPE Telco Unified OSS Console, Multiple Vulnerabilities
Potential Security Impact: Local: Arbitrary Code Execution; Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console 3.1.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-52434 |...
PT-2025-34835 · Git · Json2Avro
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438873397 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deser com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.mapOb...
OSV-2025-633 UNKNOWN WRITE in _lou_handlePassVariableAction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438413376 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...
Malicious code in @zalastax/nolb-oss (npm)
The package @zalastax/nolb-oss was found to contain malicious code...
MAL-2025-28594 Malicious code in oss-catalog (npm)
The package oss-catalog was found to contain malicious code...
Malicious code in spotify-apollo-oss-site (npm)
The package spotify-apollo-oss-site was found to contain malicious code...
Malicious code in oss-catalog (npm)
The package oss-catalog was found to contain malicious code...
MAL-2025-12860 Malicious code in @zalastax/nolb-oss (npm)
The package @zalastax/nolb-oss was found to contain malicious code...
MAL-2025-33797 Malicious code in spotify-apollo-oss-site (npm)
The package spotify-apollo-oss-site was found to contain malicious code...
OSV-2025-628 Null-dereference READ in ubsan_GetStackTrace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294033 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...
OSV-2025-620 Heap-buffer-overflow in FragPrepareChunk
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694938 Crash type: Heap-buffer-overflow WRITE 8 Crash state: FragPrepareChunk DemuxFrag demuxprocessstream...
OSV-2025-619 Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437537868 Crash type: Heap-buffer-overflow READ 1 Crash state: webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree...