CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

Malicious Package

Overview common-logify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-61951

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/...

EUVD-2025-34662

Malicious code in batchw-test-common-config npm...

Malicious Package

Overview batchw-test-common-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2025-9124

A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault...

ai.catboost:catboost-spark_3.5_2.12 (>=1.2.3, <=1.2.10), ai.djl.spark:spark_2.12 (0.29.0) +294 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (>=3.5.0, <=3.5.1)

org.apache.spark:spark-network-common2.12 MAVEN version =3.5.0, =1.2.3, =3.44.0.1-1-3.5, =0.1.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.6.17, =0.0.3, =14.0.0, =14.0.0, =14.0.0, =14.17.3 and more Source cves: CVE-2025-55039 Source advisory: GHSA-6P6V-M64V-JX8Q...

ai.catboost:catboost-spark_3.5_2.13 (>=1.2.3, <=1.2.10), ai.telemetria:optima-spark-common_2.13 (>=0.1.0, <=0.1.2) +157 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.13 (>=3.5.0, <=3.5.1)

org.apache.spark:spark-network-common2.13 MAVEN version =3.5.0, =1.2.3, =0.1.0, =4.43.0, =3.5.0, =3.5.00.20.1, =3.5.0, =2.0.4, =2.1.6-spark-3.5.1, =2.1.6-spark-3.5.1, =2.2.1-spark-3.5.1 and more Source cves: CVE-2025-55039 Source advisory: GHSA-6P6V-M64V-JX8Q...

ai.tripl:arc-cassandra-pipeline-plugin_2.12 (>=1.2.0, <=1.3.0), ai.tripl:arc-dataquality-udf-plugin_2.12 (>=1.2.0, <=1.3.0) +134 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (2.4.5)

org.apache.spark:spark-network-common2.12 MAVEN version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-network-common2.12 and may be impacted: - ai.tripl:arc-cassandra-pipeline-plugin2.12 =1.2.0, =1.2.0, =1.6.0, =1.1.0,...

ai.salmonbrain:ruleofthumb_2.4.3_2.12 (0.0.3), ai.tripl:arc-deltalake-pipeline-plugin_2.12 (>=1.0.0, <=1.1.0) +93 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (2.4.3)

org.apache.spark:spark-network-common2.12 MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-network-common2.12 and may be impacted: - ai.salmonbrain:ruleofthumb2.4.32.12 0.0.3 -...

ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3), ai.whylabs:whylogs-java-spark_2.4.7-scala_2.12 (0.1.2-b6) +61 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (2.4.7)

org.apache.spark:spark-network-common2.12 MAVEN version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-network-common2.12 and may be impacted: - ai.catboost:catboost-spark2.12 =0.25-rc1, =1.0.7, =2.4.70.18.1-beta3, =0.13.6...

ai.catboost:catboost-spark_3.5_2.12 (>=1.2.3, <=1.2.10), ai.djl.spark:spark_2.12 (0.29.0) +294 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (>=3.5.0, <=3.5.1)

org.apache.spark:spark-network-common2.12 MAVEN version =3.5.0, =1.2.3, =3.44.0.1-1-3.5, =0.1.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.6.17, =0.0.3, =14.0.0, =14.0.0, =14.0.0, =14.17.3 and more Source cves: CVE-2025-55039 Source advisory: OSV:GHSA-6P6V-M64V-JX8Q...

DEBIAN-CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

MAL-2025-48427 Malicious code in batchw-test-common-config (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5e9b5b07a6f6f901ab96aa3b48d3b80dc1c0928d03c4cd4018422a15ced54b Any computer that has this package installed or running should be considered...

Malicious code in batchw-test-common-config (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5e9b5b07a6f6f901ab96aa3b48d3b80dc1c0928d03c4cd4018422a15ced54b Any computer that has this package installed or running should be considered...

CVE-2025-54274

creationtimestamp| type| source ---|---|--- 2025-10-14 19:18:34+00:00| seen| Telegram/igMNAS4qJkb0epUNlXSFX7qBB5AxkQ0z-UBMujm2amTrbeU 2026-09-09 05:00:17+00:00| seen| https://t.me/IntelEncyclopedia/1375 2026-09-10 00:00:25+00:00| seen| https://t.me/IntelEncyclopedia/1375...

Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch via the parseCommonName method . An attacker can gain unauthorized access or impersonate users by crafting malicious X.509 certificates that bypass hostname validation through...

EUVD-2025-34187

A denial-of-service security issue exists in the affected product and version. The security issue is caused through CIP communication using crafted payloads. The security issue could result in no CIP communication with 1715 EtherNet/IP Adapter.A restart is required to recover...

CVE-2025-9124

A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault...

CVE-2025-9178

The CVE-2025-9178 issue affects Rockwell Automation 1715 EtherNet/IP Adapters (notably the 1715-AENTR). It is a denial-of-service vulnerability triggered by crafted CIP payloads in the CIP communications path, which can cause the web server/CIP handling to crash or lose CIP communication, and req...