25104 matches found
Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...
MAL-2025-46141 Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...
MAL-2025-46439 Malicious code in ultra-less-ethology-string (npm)
The package ultra-less-ethology-string was found to contain malicious code...
MAL-2025-43963 Malicious code in dependencies-backend-mutation-string (npm)
The package dependencies-backend-mutation-string was found to contain malicious code...
MAL-2025-46149 Malicious code in string-stratigraphy-alphard-markdown (npm)
The package string-stratigraphy-alphard-markdown was found to contain malicious code...
MAL-2025-46148 Malicious code in string-modifier-utils (npm)
The package string-modifier-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in string-modifier-utils (npm)
The package string-modifier-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
OESA-2025-2211 rubygem-rack security update
Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a single...
OESA-2025-2155 gnuplot security update
Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed i.e., you don't have to pay for it. It was originally created to allow scientists and students to visualize mathematica...
SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2025:00614-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:00614-1 advisory. Upgrade to 15.12: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Tenable h...
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.12: CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
bpf: Reject %p% format string in bprintf-like helpers
...
Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
...
Backticks not treated as string delimiters in html/template
...
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.
...
It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.
...
ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
...
usb: gadget: configfs: Fix OOB read on empty string write
...
Linux Distros Unpatched Vulnerability : CVE-2021-45927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd6e029ee0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...
Linux Distros Unpatched Vulnerability : CVE-2024-6197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when...