5771 matches found
EUVD-2025-179450
Malicious code in csv-mongodb-rehype-less-loader npm...
EUVD-2025-175675
Malicious code in vuetify-thermochronology-csv-cryovolcano npm...
EUVD-2025-179448
Malicious code in csv-steganography-sadr-buffer npm...
EUVD-2025-176627
Malicious code in rimraf-quantum-csv-javascript npm...
EUVD-2025-176074
Malicious code in tachyon-vortex-bellatrix-csv npm...
Malicious code in kuiperbelt-taurus-csv-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8993b5329a7604ba0c4c94d86538798b1f58cc2d7e21fb16f89b966ebf27387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178626
Malicious code in gulp-rollup-plugin-carina-csv npm...
Malicious code in csv-mongodb-rehype-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f821738c4cf7c99d8107896b24f9a81bd00506c105a6aca07ef8a729d5d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175558
Malicious code in whitedwarf-inquirer-csv-blitz npm...
MAL-2025-186434 Malicious code in csv-steganography-sadr-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576c9c5300d33eedfca84952fa6d232cca75ad84dbeb63ccde6da8ff03408c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64406 Apache OpenOffice: Possible memory corruption during CSV import
An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the...
CVE-2025-64406
Apache OpenOffice versions through 4.1.15 are vulnerable to an out-of-bounds Write vulnerability. The root cause stems from out-of-bounds writes to memory buffers, which can be triggered by a remote attacker through a specially crafted document. This flaw can lead to a program crash (Denial of Se...
CVE-2025-12732
CVE-2025-12732 impacts the WordPress plugin “WP Import – Ultimate CSV XML Importer for WordPress” (versions
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...
WordPress WP Import plugin <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure vulnerability
Missing Authorization to Authenticated Author+ Sensitive Information Exposure vulnerability discovered by M Indra Purnama type5afe in WordPress Plugin WP Ultimate CSV Importer versions = 7.33...
EUVD-2025-124388
Malicious code in node-sass-csv-nconf-algol npm...
EUVD-2025-114770
Malicious code in csv-antares-halley-kastra npm...
EUVD-2025-115387
Malicious code in charon-csv-development-equinox npm...