MAL-2025-112175 Malicious code in partial_mule_harlequin-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca353e7f1dbdd908f1e46488fdd0316315f4f4c5c00e1980280522cbb7d8de81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111830 Malicious code in dusty_buzzard_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b940cde5e2441ec7a9602d30afed8475d586e99d23ae1ad7cba5391a13777458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth_catshark_blush-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0114f244163ac2356a4ff4eaacb35d9351f77ddba9e2b1c64c1df936b9d0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74640

Malicious code in flattunafuchsia-65 npm...

EUVD-2025-74722

Malicious code in dustybuzzardrose-65 npm...

EUVD-2025-77604

Malicious code in handicappedlobsterivory-65 npm...

EUVD-2025-25672

Malicious code in bioql PyPI...

CVE-2025-54491

The CVE-2025-54491 entry describes a stack-based buffer overflow in The Biosig Project libbiosig 3.9.0 and the Master branch (commit 35a819fa) related to the MFER parsing function. A specially crafted MFER file can lead to arbitrary code execution, with the issue manifesting at biosig.c: line 919...

Mozilla Firefox ESR Security Update (mfsa_2025-65) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Linux Distros Unpatched Vulnerability : CVE-2018-6069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2018-6071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Adobe Media Encoder < 14.5 Arbitrary Code Execution (APSB20-65) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 14.5. It is, therefore, affected by a vulnerability as referenced in the APSB20-65 advisory. - Adobe Media Encoder version 14.4 and earlier for Windows is affected by an uncontrolled search path vulnerability that...

golang: crypto/tls: lack of a limit on buffered post-handshake

A flaw was found in Golang. QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With the fix, connections now consistently reject messages larger than 65KiB in size...

Adobe Premiere Pro Security Update (APSB23-65) - Windows

Adobe Premiere Pro is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:premierepro";...

Adobe Premiere Pro < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-65)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-65 advisory. - Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds re...

Adobe Premiere Pro < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-65) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-65 advisory. - Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds read...

UBUNTU-CVE-2023-39322

QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size...

CVE-2023-1995

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

garage-lapeyre-65.fr Cross Site Scripting vulnerability OBB-3419908

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

garage-lapeyre-65.fr Cross Site Scripting vulnerability OBB-3409707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...