IBM DB2 Query Handler DoS

The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...

Ivanti Connect Secure IPSec DoS

The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

IBM App Connect Enterprise File Write

The vulnerability of the bar files in the control panel of the IBM App Connect Enterprise software relates to incorrect path name restrictions for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write any files into the file system remotely...

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...

MAL-2025-1900 Malicious code in meta-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1859 Malicious code in instacart-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in godaddy-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1814 Malicious code in godaddy-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1800 Malicious code in epicagames-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in epicagames-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1708 Malicious code in airbnb-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in airbnb-connect (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ct-connect-stripe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e3e59596a1bfed6dbb57c4cdf6b56d77ef26faa5eeb31708ca799ec3cfb7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2036 Malicious code in ct-connect-stripe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e3e59596a1bfed6dbb57c4cdf6b56d77ef26faa5eeb31708ca799ec3cfb7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ct-connect-stripe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2025-9529

Name of the Vulnerable Software and Affected Versions OpenID Connect Core versions prior to 1.0 errata set 3 Description The issue allows audience injection in certain situations when the private key jwt authentication mechanism is used. A malicious Authorization Server could trick a Client into...

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...

CVE-2025-27370

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...