12906 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-47069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry domqtimedreceive...
MAL-2025-6948 Malicious code in pngquant-bin-static (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in callgraphbff (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in makerjs-dev (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6901 Malicious code in @angular_devkit/build_angular (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6921 Malicious code in dessandro-classie (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in pentest-event-emitter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6951 Malicious code in pydantic-settings (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in epc-node-web-client (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in com.microsoft.mixedreality.webrtc (npm)
The package com.microsoft.mixedreality.webrtc was found to contain malicious code...
MAL-2025-27266 Malicious code in neev-communication (npm)
The package neev-communication was found to contain malicious code...
MAL-2025-9142 Malicious code in @omisepayments/in-app-communication-graphql-sdk (npm)
The package @omisepayments/in-app-communication-graphql-sdk was found to contain malicious code...
Malicious code in neev-communication (npm)
The package neev-communication was found to contain malicious code...
CVE-2025-48807
Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2024-54678
A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...
CVE-2025-42946
Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...
MAL-2025-6865 Malicious code in azure-documentdb-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ae212af083dc32114fe6584d59ab57ac5b5c3b77d59d83cd62af05f8706cdf0 The OpenSSF Package Analysis project identified 'azure-documentdb-node' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
Malicious code in azure-documentdb-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ae212af083dc32114fe6584d59ab57ac5b5c3b77d59d83cd62af05f8706cdf0 The OpenSSF Package Analysis project identified 'azure-documentdb-node' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
Malicious code in dagger-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....