EUVD-2025-178511

Malicious code in hot-thread-cold-fast-epsilon npm...

EUVD-2025-178656

Malicious code in grep-cron-thread-grep-short npm...

EUVD-2025-175956

Malicious code in thread-daemon-try-omega-mock npm...

EUVD-2025-176139

Malicious code in sun-thread-monitor-void-sun npm...

EUVD-2025-175955

Malicious code in thread-link-code-stack-old npm...

EUVD-2025-176949

Malicious code in proxy-interface-visualize-thread-psi npm...

EUVD-2025-175957

Malicious code in thread-compile-parse-decrypt-air npm...

EUVD-2025-177777

Malicious code in module-void-fast-thread-double npm...

EUVD-2025-179321

Malicious code in deploy-thread-scale-omega-enum npm...

EUVD-2025-175953

Malicious code in thread-simulate-meta-small-cat npm...

EUVD-2025-179118

Malicious code in enum-compress-proxy-thread-user npm...

Malicious code in module-void-fast-thread-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26e82491011138f549db0c2dc4d0e2c8d67663ea485fd682a4ba8ddd7a2d647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179711

Malicious code in cloud-analyze-spy-thread-object npm...

Siemens SIMATIC S7-1500 Double Free (CVE-2023-27537)

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate handles. This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks...

Siemens SIMATIC and SCALANCE Multiple Releases of Same Resource or Handle (CVE-2025-0665)

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Updated perl packages fix security vulnerabilities

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes. CVE-2024-56406 Perl threads have a working directory race condition where file operations may target...

CVE-2025-31940

Incorrect default permissions for some IntelR Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

UBUNTU-CVE-2025-40116

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990839)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990839 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check thread pointer validity, which could result in a null pointer dereference...