SUSE SLES12 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2025:02919-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02919-1 advisory. - CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser bsc1244404 - CVE-2025-47807: Fixed NULL-pointer dereference in TMPlaye...

Linux Distros Unpatched Vulnerability : CVE-2021-22569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small...

LeapWare LeapFTP 安全漏洞

LeapWare LeapFTP is an FTP client software from LeapWare. A security vulnerability exists in LeapWare LeapFTP versions prior to 3.1.x. The vulnerability stems from a stack-based buffer overflow in the FTP client parser, which could lead to the execution of arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2022-40152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks DOS if DTD support is enabled. If the parser is running on user supplied...

Apache bRPC Denial of Service Vulnerability

Apache bRPC is the United States Apache Apache Foundation's industrial-grade RPC framework for building reliable and high-performance services. A denial of service vulnerability exists in Apache bRPC, which stems from improper memory allocation in the Redis protocol parser, and can be exploited b...

Linux Distros Unpatched Vulnerability : CVE-2020-14619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 8.0.20 and prior. Easily exploitab...

Linux Distros Unpatched Vulnerability : CVE-2023-24580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs e.g., an...

PT-2025-34104

Name of the Vulnerable Software and Affected Versions MJM QuickPlayer version 2010 Description MJM QuickPlayer also known as MJM Player contains a stack-based buffer overflow triggered by opening a malicious .s3m music file. This issue arises from improper bounds checking in the file parser, whic...

Linux Distros Unpatched Vulnerability : CVE-2020-2930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 8.0.19 and prior. Difficult to...

Linux Distros Unpatched Vulnerability : CVE-2019-3004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 8.0.17 and prior. Easily exploitab...

Linux Distros Unpatched Vulnerability : CVE-2018-1324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and...

CLSA-2025-1755617966 ruby: Fix of CVE-2023-36617

CVE-2023-36617: fix mishandling invalid URLs that have specific characters in URI parser to prevent ReDoS issue...

Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following issues: CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser bsc1244404 CVE-2025-47807: Fixed NULL-pointer dereference in TMPlayer subtitle parser bsc1244403 CVE-2025-47806: Fixed NULL-pointer dereference in SubRip...

SUSE-SU-2025:02919-1 Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following issues: - CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser bsc1244404 - CVE-2025-47807: Fixed NULL-pointer dereference in TMPlayer subtitle parser bsc1244403 - CVE-2025-47806: Fixed NULL-pointer dereference in...

Medium: LibRaw

Issue Overview: In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser. CVE-2025-43961 In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or the fra...

Linux Distros Unpatched Vulnerability : CVE-2025-29786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser is given an unbounded input string, it...

Linux Distros Unpatched Vulnerability : CVE-2023-28154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a propert...

Linux Distros Unpatched Vulnerability : CVE-2020-7793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service ReDoS in multiple regexes see linked commit for more info...

Linux Distros Unpatched Vulnerability : CVE-2021-33587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

Linux Distros Unpatched Vulnerability : CVE-2013-6393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service...