8979 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-18829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafte...
Linux Distros Unpatched Vulnerability : CVE-2023-49551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonparse function in the msj.c file. CVE-2023-49551 Note that...
Linux Distros Unpatched Vulnerability : CVE-2024-40675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no...
Linux Distros Unpatched Vulnerability : CVE-2022-43037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4File::ParseStream in /Core/Ap4File.cpp. CVE-2022-43037 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2025-29489
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming v0.4.8 was discovered to contain a memory leak via the parseSWFMORPHLINESTYLES function. CVE-2025-29489 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2024-24149
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak issue discovered in parseSWFGLYPHENTRY in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. CVE-2024-24149 Note...
PT-2025-36993
Name of the Vulnerable Software and Affected Versions: rAthena versions prior to commit 0cc348b Description: rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. A missing bound check in the chclif parse moveCharSlot function can lead to...
CVE-2025-10096 SimStudioAI sim route.ts server-side request forgery
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2025-10096 SimStudioAI sim route.ts server-side request forgery
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2025-10096: Server-Side Request Forgery (SSRF)
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
The vulnerability of the cJSON_ParseWithLength function allows attackers to access confidential information.
The vulnerability of the cJSONParseWithLength function in the cJSON parser is related to reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to access confidential information...
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
...
Linux Distros Unpatched Vulnerability : CVE-2025-38728
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in...
Malicious code in cygnus-dotenv-parse-variables-pm2-sequelize (npm)
The package cygnus-dotenv-parse-variables-pm2-sequelize was found to contain malicious code...
Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)
The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...
Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm)
The package dotenv-parse-variables-cluster-mongoose-xanthus was found to contain malicious code...
Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)
The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...
Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)
The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...