Malicious code in alpha-watermelon-romeo-yivln (npm)

The package alpha-watermelon-romeo-yivln was found to contain malicious code...

Malicious code in delta-alpha-charlie-jkmkg (npm)

The package delta-alpha-charlie-jkmkg was found to contain malicious code...

Malicious code in alpha-mike-golf-euckn (npm)

The package alpha-mike-golf-euckn was found to contain malicious code...

Malicious code in charlie-nectarine-alpha-gwxpd (npm)

The package charlie-nectarine-alpha-gwxpd was found to contain malicious code...

Malicious code in alpha-orange-fig-davzb (npm)

The package alpha-orange-fig-davzb was found to contain malicious code...

Malicious code in alpha-juliet-orange-mndgx (npm)

The package alpha-juliet-orange-mndgx was found to contain malicious code...

Malicious code in mike-bravo-alpha-ywklp (npm)

The package mike-bravo-alpha-ywklp was found to contain malicious code...

MAL-2025-44610 Malicious code in honeydew-alpha-raspberry-pgmdr (npm)

The package honeydew-alpha-raspberry-pgmdr was found to contain malicious code...

MAL-2025-44298 Malicious code in foxtrot-yankee-alpha-zrjbi (npm)

The package foxtrot-yankee-alpha-zrjbi was found to contain malicious code...

MAL-2025-43432 Malicious code in alpha-juliet-orange-mndgx (npm)

The package alpha-juliet-orange-mndgx was found to contain malicious code...

OESA-2025-2196 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

Linux Distros Unpatched Vulnerability : CVE-2025-55004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffe...

CVE-2025-58047

Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when...

CVE-2025-58047 Volto affected by possible DoS by invoking specific URL by anonymous user

Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when...

ImageMagick < 7.1.2-1 Heap-Buffer Overflow (GHSA-cjc8-g9w8-chfw)

The remote host has a version of ImageMagick installed that is prior to 7.1.2-1. It is, therefore, affected by a vulnerability as referenced in GHSA-cjc8-g9w8-chfw advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1,...

PT-2025-35112

Name of the Vulnerable Software and Affected Versions Volto versions 19.0.0-alpha.1 through 19.0.0-alpha.4 Volto versions 18.0.0 through 18.24.0 Volto versions 17.0.0 through 17.22.1 Volto versions prior to 16.34.0 Description Volto, a React-based frontend for the Plone Content Management System,...

GHSA-CJC8-G9W8-CHFW imagemagick: heap-buffer overflow read in MNG magnification with alpha

Vulnerability Details When performing image magnification in ReadOneMNGIMage in coders/png.c, there is an issue around the handling of images with separate alpha channels. When loading an image with a color type that implies a separate alpha channel ie. jngcolortype = 12, we will load the alpha...

imagemagick: heap-buffer overflow read in MNG magnification with alpha

Vulnerability Details When performing image magnification in ReadOneMNGIMage in coders/png.c, there is an issue around the handling of images with separate alpha channels. When loading an image with a color type that implies a separate alpha channel ie. jngcolortype = 12, we will load the alpha...

Linux Distros Unpatched Vulnerability : CVE-2018-17613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram Desktop aka tdesktop 1.3.16 alpha, when Use proxy is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol...

Linux Distros Unpatched Vulnerability : CVE-2017-12450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The alphavmsobjectp function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows...