CVE-2018-25118

creationtimestamp| type| source ---|---|--- 2025-10-20 22:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nsw45at32o 2025-10-23 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb24xsxs2w 2025-11-15 00:00:00+00:00| seen| The Shadowserver...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the mbedtlsmpimodinv or mbedtlsmpigcd functions. An attacker can recover sensitive information from RSA operations by performing a local timing analysis. Note: Applications that do not use RSA private keys and do not...

CVE-2025-60514

Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0, <=4.0.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0, <=4.0.1) +32 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (>=4.0.0, <=4.0.1)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2025-57738https://vulners.com/cve/CVE-2025-577...

Malicious Package

Overview ios-signing-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview java-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...

CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...

CVE-2025-54764

Mbed TLS versions prior to 3.6.5 are vulnerable to local timing attacks affecting certain RSA operations , specifically through the mbedtls_mpi_mod_inv and mbedtls_mpi_gcd routines. This vulnerability (related to SSBleed and M-Step ) allows a local attacker to fully recover RSA private keys or re...

SUSE: Security Advisory (SUSE-SU-2025:03614-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:03628-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JLSEC-2025-101 FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in...

FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...

CVE-2025-11941

creationtimestamp| type| source ---|---|--- 2025-10-19 16:50:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3kr3ux5sn2o...

RUSTSEC-2025-0101 `unic-ucd-common` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icuproperties...

`unic-common` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +20 more potentially affected by unknown CVE via unic-ucd-common (>=0.7.0, <=0.9.0)

unic-ucd-common CARGO version =0.7.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.1.0, =0.7.0, =0.7.0, =0.9.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0101...

add_space (>=0.1.2, <=0.1.8), ale_python_parser (>=0.1.0, <=0.1.3) +244 more potentially affected by unknown CVE via unic-common (>=0.7.0, <=0.9.0)

unic-common CARGO version =0.7.0, =0.1.2, =0.1.0, =0.3.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.2.0, =1.8.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0080...

RUSTSEC-2025-0080 `unic-common` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

SUSE CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-62171

ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating...