978 matches found
compat-libtiff3 security update
3.9.4-14 - fix CVE-2025-9900: Write-What-Where via TIFFReadRGBAImageOriented RHEL-112528...
EUVD-2021-24893
Malware in sbrugna...
EUVD-2020-8191
Malware in sbrugna...
EUVD-2017-6569
Malware in sbrugna...
EUVD-2024-36231
Malicious code in bioql PyPI...
EUVD-2025-30917
Malicious code in bioql PyPI...
EUVD-2024-18456
Malicious code in bioql PyPI...
EUVD-2024-42464
Malicious code in bioql PyPI...
EUVD-2024-41326
Malicious code in bioql PyPI...
EUVD-2024-19783
Malicious code in bioql PyPI...
EUVD-2024-20833
Malicious code in bioql PyPI...
EUVD-2024-54498
Malicious code in bioql PyPI...
EUVD-2022-33393
Malicious code in bioql PyPI...
BIT-MONGOOSE-2024-53900
Mongoose before 8.8.3 can improperly use $where in match, leading to search injection...
Libtiff: libtiff write-what-where
...
BIT-MONGOOSE-2025-23061
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900...
Linux Distros Unpatched Vulnerability : CVE-2025-9900
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Libtiff. This vulnerability is a write-what-where condition, triggered when the library processes a specially crafted TIFF image file. By...
CVE-2025-9900
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...
AZL-67722 CVE-2025-9900 affecting package openjpeg2 2.3.1-12
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...
AZL-67803 CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-10
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...