EUVD-2025-177787

Malicious code in mock-xml-omicron-protected-class npm...

EUVD-2025-175400

Malicious code in zero-warn-char-class-visualize npm...

EUVD-2025-175747

Malicious code in user-root-node-transpile-class npm...

EUVD-2025-177477

Malicious code in old-export-class-cron-deploy npm...

EUVD-2025-176407

Malicious code in shell-class-encrypt-info-zeta npm...

EUVD-2025-175664

Malicious code in warn-class-proxy-cron-earth npm...

EUVD-2025-177183

Malicious code in pi-compress-grid-class-fast npm...

EUVD-2025-179721

Malicious code in class-secure-function-transpile-authorize npm...

EUVD-2025-178378

Malicious code in integer-simulate-mu-class-permission npm...

EUVD-2025-180008

Malicious code in book-sanitize-cat-cold-class npm...

EUVD-2025-176756

Malicious code in refactor-file-sed-class-wind npm...

EUVD-2025-179722

Malicious code in class-kernel-lambda-void-try npm...

EUVD-2025-179154

Malicious code in emulate-wind-sudo-object-class npm...

EUVD-2025-179710

Malicious code in cloud-class-stack-xml-runtime npm...

MAL-2025-186790 Malicious code in epsilon-class-cluster-root-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803cee7f39b9a2ab6058d1cd3ae867eab62842ca33d4e97cb5e92576816dc45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-47222: Improper Access Control

A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any of the properties requiring a class path and the provided class is not expected to return different errors if the class exists in deployment or not. This returns information...

Siemens SIMATIC S7-1500 and Ruggedcom ROX Devices Use After Free (CVE-2021-36086)

The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2025-64500

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...

kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwis...

kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfscchangeclass when...