15002 matches found
CVE-2025-13120 mruby array.c sort_cmp use after free
A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...
CVE-2025-40117
In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...
CVE-2025-40118
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 "scsi: pm80xx: Set phyattached to zero when device is gone" UBSAN reports: UBSAN: array-index-out-of-bounds in drivers/scsi/pm8001/pm8001sas.c:786:...
EUVD-2025-175701
Malicious code in visualize-validate-array-hot-analyze npm...
Malicious code in socket-sigma-minify-pipe-array (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db413d110af403ea736f9c779fd5677f35ce04384260e6cc655e3585db962105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in visualize-validate-array-hot-analyze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5405559277835b28bc4c8bb6db51998aa22c4fd91d1ef31c819a28799cc347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176303
Malicious code in socket-sigma-minify-pipe-array npm...
EUVD-2025-175665
Malicious code in warn-bash-grep-array-test npm...
EUVD-2025-177155
Malicious code in pipe-grid-byte-old-array npm...
EUVD-2025-176938
Malicious code in public-final-iota-upsilon-array npm...
EUVD-2025-180323
Malicious code in array-async-export-lambda-transpile npm...
EUVD-2025-180321
Malicious code in array-eta-sudo-new-cron npm...
EUVD-2025-180219
Malicious code in authenticate-array-cluster-mock-import npm...
Malicious code in quick-decode-transpile-array-wind (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be1eb5319667c7103faae653520c2ac40f78ca9957e497f34f7395845b3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176832
Malicious code in quick-decode-transpile-array-wind npm...
EUVD-2025-177319
Malicious code in parse-array-slow-emulate-notify npm...
EUVD-2025-175666
Malicious code in warn-array-container-grid-stub npm...
EUVD-2025-176425
Malicious code in serialize-cloud-key-array-secure npm...