Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-29393

Malicious code in bioql PyPI...

6.6AI score
Exploits0References9
OSV
OSV
added 2025/10/01 5:15 p.m.1 views

UBUNTU-CVE-2025-11233

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

6.3CVSS5.8AI score0.00166EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2025/10/01 4:49 p.m.4 views

CVE-2025-11233

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

6.3CVSS5.3AI score0.00166EPSS
Exploits0
OSV
OSV
added 2025/05/28 9:7 p.m.1 views

GHSA-94V7-WXJ6-R2Q5 multicast in source builds from vulnerable setuptools dependency

Impact Some source-builds may be impacted by a CWE-1395 eg. vulnerable setuptools dependency. Multicast prior to v2.0.9a3 on systems with minimal dependancies installed may use setuptools =80.4 Pre-release version v2.0.9a3 and later are recommended for improved stability over v2.0.9a0 Workarounds...

5.9CVSS6.9AI score
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/11/15 1:57 a.m.3 views

SUSE CVE-2023-42816

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerability was in Kyvernos Notary verifier. An attacker would need control over the registry from which Kyverno would fetch...

6.1CVSS6.6AI score0.00218EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.1 views

SUSE CVE-2018-11804

Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been included in release branches since 1.3.x, up to and including master. This server will accept connections from external hosts by default. A...

7.5CVSS9.1AI score0.00646EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:33 a.m.3 views

SUSE CVE-2022-2056

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

3.3CVSS6.7AI score0.00092EPSS
Exploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:33 a.m.1 views

SUSE CVE-2022-2057

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

3.3CVSS6.7AI score0.00092EPSS
Exploits1References7
OSV
OSV
added 2022/03/11 6:15 p.m.3 views

AZL-9022 CVE-2022-0909 affecting package libtiff for versions less than 4.3.0-2

Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa...

5.5CVSS6.7AI score0.00203EPSS
Exploits1References1
Rows per page
Query Builder