10594 matches found
@nasa-jpl/stellar-svelte (>=2.1.9, <=2.1.10), @scouterdev/ui (0.0.1) +2 more potentially affected by CVE-2025-62381 via sveltekit-superforms (>=2.16.1, <=2.27.1)
sveltekit-superforms NPM version =2.16.1, =2.1.9, =1.3.0, =0.0.2-dev.80, =1.0.9 Source cves: CVE-2025-62381 Source advisory: GHSA-HWMC-4C8J-XXJ7...
CVE-2025-58735
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-59282
Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...
EUVD-2018-21604
VestaCP commit a3f0fa1 2018-05-31 up to commit ee03eff 2018-06-13 contain embedded malicious code that resulted in a supply-chain compromise. New installations created from the compromised installer since at least May 2018 were subject to installation of Linux/ChachaDDoS, a multi-stage DDoS bot...
[SECURITY] Fedora 42 Update: mirrorlist-server-3.0.8-1.fc42
The mirrorlist-server uses the data created by MirrorManager2 https://github.com/fedora-infra/mirrormanager2 to answer client request for the "best" mirror. This implementation of the mirrorlist-server is written in Rust. The original version of the mirrorlist-server was part of the MirrorManager...
PT-2025-42217
VestaCP commit a3f0fa1 2018-05-31 up to commit ee03eff 2018-06-13 contain embedded malicious code that resulted in a supply-chain compromise. New installations created from the compromised installer since at least May 2018 were subject to installation of Linux/ChachaDDoS, a multi-stage DDoS bot...
Arbitrary Command Injection
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Command Injection via the nodevm execution environment when integrated modules such as Puppeteer or Playwright are used with attacker-controlled browser binary paths and parameters...
EUVD-2025-34400
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58738
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58735
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58736
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58736
CVE-2025-58736 is a use-after-free in Windows Inbox COM Objects that enables local code execution by an attacker who can interact with the affected system. CVSS v3.1: AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H; Privileges: None, User Interaction: Required, with high impact on confidentiality/ integrity/...
CVE-2025-58733 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
...
CVE-2025-58731 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
...
CVE-2025-58731 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
...
CVE-2025-58731
CVE-2025-58731 is an Inbox COM Objects use-after-free vulnerability. The connected EUVD entry ( inbox COM Objects ) and CVE records identify the issue as enabling local code execution by an unauthenticated attacker who can trigger the use-after-free condition. Public references point to Microsoft...
CVE-2025-58730
The CVE-2025-58730 entry is corroborated by connected sources as a local code-execution via a use-after-free in Inbox COM Objects. The KB/MSKB documents listed do not provide vendor/version specifics or a public fix; public details in EUVD-2025-34313/ NCSC-2025-0310 reiterate the issue abstractly...
CVE-2025-58730 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
...