25067 matches found
EUVD-2025-198054
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
GNU GRUB security vulnerability
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that stems from improper handling of USB device string conversion, which could result in a denial of service or data corruption...
PT-2025-47374
Name of the Vulnerable Software and Affected Versions cbor2 versions through 5.7.0 Description The cbor2 software contains issues in the decode definite long string function within the C extension decoder source/decoder.c. An integer underflow can lead to an out-of-bounds read, and a memory leak...
CVE-2025-64076
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
curl: Off-by-One Buffer Overflow in SMB Path Handler
Summary Found an off-by-one buffer overflow in lib/smb.c when handling SMB file paths. The bounds check uses instead of =, allowing a path of exactly 1023 bytes to overflow the 1024-byte buffer by one byte when the null terminator is added. Details File: lib/smb.c Function: smbsendopen Lines: 784...
OESA-2025-2686 python-ldap security update
python-ldap: python-ldap provides an object-oriented API to access LDAP directory servers from Python programs. Mainly it wraps the OpenLDAP 2.x libs for that purpose. Additionally the package contains modules for other LDAP-related stuff e.g. processing LDIF, LDAPURLs, LDAPv3 schema, LDAPv3...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the strscpy function in the Linux operating system’s kernel is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Cross-site Scripting (XSS)
Overview vega is a library that implements Vega visualization grammar. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the toString function in environments where the VEGADEBUG global variable is present. An attacker can execute arbitrary JavaScript code by...
EUVD-2025-178834
Malicious code in framework-triton-string-farout npm...
EUVD-2025-176075
Malicious code in tachyon-string-version-sequelize npm...
EUVD-2025-176548
Malicious code in sails-blueshift-string-warp npm...
EUVD-2025-176177
Malicious code in string-index-dog-abstract-simple npm...
Malicious code in izar-string-command-neutronstar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcaeebf03806cb0ef5c609388515b241112b004e88e71aeee348b374f64a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176174
Malicious code in string-version-oauth-epimetheus npm...
EUVD-2025-178290
Malicious code in java-short-string-java-yaml npm...
EUVD-2025-177788
Malicious code in mock-string-simple-final-data npm...
EUVD-2025-179958
Malicious code in build-commitlint-config-angular-lithosphere-string npm...
EUVD-2025-176181
Malicious code in string-crust-exoplanet-centauri npm...
EUVD-2025-176180
Malicious code in string-deneb-string-spectroscopy npm...
MAL-2025-189800 Malicious code in tachyon-string-version-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fdfc74478a9afbba79d8616c10a0a83eb890f0f6898259eec91b20c796be2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...