PT-2025-34031 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2025.2 Description: A HTML injection issue was possible through the Remote Development feature. Recommendations: Update JetBrains IntelliJ IDEA to version 2025.2 or later...

JetBrains IntelliJ IDEA 安全漏洞

JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . JetBrains IntelliJ IDEA suffers from...

Linux Distros Unpatched Vulnerability : CVE-2025-48050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the current working directory. NOTE: the Supplier...

cairo-devel-1.18.4-3.1 on GA media (moderate)

cairo-devel-1.18.4-3.1 on GA media Announcement ID: openSUSE-SU-2025:15458-1 Rating: moderate Cross-References: CVE-2025-50422 CVSS scores: CVE-2025-50422 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

Linux Distros Unpatched Vulnerability : CVE-2025-21587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions tha...

VulnCheck KEV: CVE-2025-54782

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...

Amazon Linux 2023 : captree, libcap, libcap-devel (ALAS2023-2025-1141)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1141 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which a...

Linux Distros Unpatched Vulnerability : CVE-2022-3178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV. CVE-2022-3178 Note that Nessus relies on the presence of the package as reported by the...

CVE-2025-7972

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODEENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers...

MAL-2025-6939 Malicious code in makerjs-dev (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in zooarchaeology-coronalmassejection-development-chalk (npm)

The package zooarchaeology-coronalmassejection-development-chalk was found to contain malicious code...

Malicious code in spawn-vortex-development-epimetheus (npm)

The package spawn-vortex-development-epimetheus was found to contain malicious code...

Malicious code in electron-development-eslint-config-galaxy (npm)

The package electron-development-eslint-config-galaxy was found to contain malicious code...

MAL-2025-18355 Malicious code in development-kinetic-accretion-dagda (npm)

The package development-kinetic-accretion-dagda was found to contain malicious code...

Malicious code in development-antares-cosmogenic-enceladus (npm)

The package development-antares-cosmogenic-enceladus was found to contain malicious code...

Malicious code in europa-express-development-luminescence (npm)

The package europa-express-development-luminescence was found to contain malicious code...

Malicious code in development-module-wezen-solarnebula (npm)

The package development-module-wezen-solarnebula was found to contain malicious code...

MAL-2025-26193 Malicious code in mentors-sdk-js (npm)

The package mentors-sdk-js was found to contain malicious code...

MAL-2025-27679 Malicious code in nodejs-development-writable-celeste (npm)

The package nodejs-development-writable-celeste was found to contain malicious code...

MAL-2025-21500 Malicious code in gjs-development-scripts (npm)

The package gjs-development-scripts was found to contain malicious code...