292 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-1000021
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage ...
attr (>=0.0.0, <=0.0.1), door (>=0.0.5, <=0.0.6) +6 more potentially affected by unknown CVE via new-pubsub (>=0.0.3, <=2.0.0)
new-pubsub NPM version =0.0.3, =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - watch-array 0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27366...
Malicious code in new-pubsub (npm)
The package new-pubsub was found to contain malicious code...
MAL-2025-23235 Malicious code in inno-pubsub (npm)
The package inno-pubsub was found to contain malicious code...
MAL-2025-27366 Malicious code in new-pubsub (npm)
The package new-pubsub was found to contain malicious code...
io.quarkiverse.googlecloudservices:quarkus-google-cloud-bigtable (0.5.0), io.quarkiverse.googlecloudservices:quarkus-google-cloud-bigtable-deployment (0.5.0) +83 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.12.0.final)
io.quarkus:quarkus-vertx MAVEN version 1.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkiverse.googlecloudservices:quarkus-google-cloud-bigtable 0.5.0 -...
CVE-2022-44018
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: rekor, crossplane-provider-azure-authorization, hydra, minio, nuclei, amazon-cloudwatch-agent-operator, flux-kustomize-controller, restic, terragrunt, argo-workflows, jitsucom-bulker, kubernetes, kyverno-policy-reporter-ui, pulumi-kubernetes-operator,...
Malicious code in active-pubsub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6427 Malicious code in active-pubsub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6382 Malicious code in action-pubsub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in action-pubsub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use Google PubSub nodes are vulnerable to arbitrary code execution due to [CVE-2023-36665]
Summary Node.js module protobuf.js is used by IBM App Connect Enterprise Certified Container by the Google PubSub node. IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use the Google PubSub node are vulnerable to arbitrary code execution. This...
SUSE CVE-2018-7284
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the respjsippubsub module stores the accepted formats present in the Accept headers of the request. Th...
CVE-2022-44018
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...
CVE-2022-44018
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...
Null pointer dereference
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...
Softing uaToolkit Embedded code-related vulnerabilities
Softing UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communications from Softing Germany. A security vulnerability exists in Softing uaToolkit Embedded prior to version 1.40.1, which stems from an incorrectly...
CVE-2022-44018: NULL Pointer Dereference
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...
CVE-2022-44018
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...