EUVD-2025-74505

Malicious code in keyhookwormgold-13 npm...

EUVD-2025-74815

Malicious code in comfortablepenguinamaranth-13 npm...

EUVD-2025-74483

Malicious code in livingchipmunkapricot-13 npm...

Malicious code in living_chipmunk_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea18e64bb6fbfb5f27282825e2cf539abd7d9436da879aaf6b20cc2e40c329d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64523

creationtimestamp| type| source ---|---|--- 2025-11-11 07:23:02+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g 2025-11-13 01:06:17+00:00| seen|...

EUVD-2025-72004

Malicious code in quokkawhite-13 npm...

Debian: Security Advisory (DSA-6050-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-69973 CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13

containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is...

Amazon Linux 2023 : cuda-compat-13-0 (ALAS2023NVIDIA-2025-259)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-259 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...

AZL-69878 CVE-2025-11215 affecting package nodejs 20.14.0-13

Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

AZL-69815 CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...

CVE-2025-41114

creationtimestamp| type| source ---|---|--- 2025-11-04 13:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4snzprofu2w...

Debian: Security Advisory (DSA-6048-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-12626

creationtimestamp| type| source ---|---|--- 2025-11-03 13:42:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4q5lu6ncn2k...

CVE-2025-64359

creationtimestamp| type| source ---|---|--- 2025-10-31 13:33:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4iloxznar2b...

CVE-2023-46718

creationtimestamp| type| source ---|---|--- 2025-10-30 13:56:49+00:00| seen| Telegram/7S8ygDA-XnwubApYa7xjAvNtq90QrKksB8GCT1EyAtisMww...

CVE-2025-64137

creationtimestamp| type| source ---|---|--- 2025-10-29 13:52:07+00:00| seen| Telegram/Ubssw7u6I3OHBuhsSrOpNuSt58EuYr7kN4yQqjHT9g-ns6Y...

Debian: Security Advisory (DSA-6042-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-36007

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script. The issue affects the App Framework privilege handling and could allow an authenticated attacker with low privileges to escalate with...

CVE-2025-36007 IBM QRadar SIEM incorrect privilege assignment

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script...