1426 matches found
asf__tapestry-5_CVE-2019-0207_5-4-4
このリポジトリには README がありません。...
security-research
보안 연구 Apache Software Foundation에 보고하고 ASF 보안 프로세스를 통해 공개한 취약점들입니다. 15개 프로젝트에 걸친 46개의 CVE , 2023년부터 2026년까지. 공개된 재현 코드가 존재하는 경우 링크되어 있습니다. 각각은 문제를 입증하고 이를 수정한 릴리스를 명시하는 최소한의 자체 포함 프로젝트입니다. 25개의 서로 다른 CWE에 걸쳐 두 가지 부류가 주를 이룹니다: 신뢰할 수 없는 데이터의 역직렬화7개와 서버 측 요청 위조7개. Apache 생태계 전반: 16개 CVE, 14개 프로젝트...
UBUNTU-CVE-2026-66755
Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...
UBUNTU-CVE-2026-7582
A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write. The attack needs to be approached locally...
CVE-2026-7582
A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write. The attack needs to be approached locally...
CVE-2026-7582
A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Handler. The manipulation results in out-of-bounds write. The attack needs to be approached locally...
CVE-2018-1000117
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates...
CVE-2025-12839
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...
MAL-2025-49316 Malicious code in my-team-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcebd381b163f06c896e93c9023d91db384265cd9da67f09ff1c85bd04ea70ed The package my-team-tools was found to contain malicious code. Source: ghsa-malware 320c0e93b25457bec2acf55515716007170fdce9a83295b33dc1f7c017a1f18c...
EUVD-2005-4801
Malware in sbrugna...
EUVD-2020-15049
Malware in sbrugna...
EUVD-2018-1786
Malware in sbrugna...
EUVD-2010-0852
Malware in sbrugna...
EUVD-2020-8549
Malware in sbrugna...
EUVD-2023-2135
Malicious code in bioql PyPI...
EUVD-2023-2147
Malicious code in bioql PyPI...
EUVD-2023-1748
Malicious code in bioql PyPI...
EUVD-2023-1686
Malicious code in bioql PyPI...
