EUVD-2025-99081

When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...

EUVD-2025-99107

When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...

EUVD-2025-99083

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too...

EUVD-2025-84325

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox 145 and Firefox ESR 140.5...

UBUNTU-CVE-2025-13013

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13018 Mitigation bypass in the DOM: Security component

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13013

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

EUVD-2025-90930

Malicious code in jaja-enting60-miaww npm...

EUVD-2025-88799

Malicious code in sinta-rojak93-miaww npm...

EUVD-2025-91014

Malicious code in irma-lumpur24-miaww npm...

CGA-R274-H522-38P3

Bulletin has no description...

XPath Injection

smolagents is vulnerable to XPath injection. The vulnerability is due to insecure XPath construction due to searchitemctrlf concatenating unsanitized user input into XPath expressions, allowing attackers to inject XPath to bypass filters, access unintended DOM nodes, or disrupt web automation...

EUVD-2025-74226

Malicious code in softcicadaharlequin-99 npm...

EUVD-2025-75505

Malicious code in superaardwolf-appteadev npm...

EUVD-2025-77540

Malicious code in progressivelungfishturquoise-24 npm...

EUVD-2025-77532

Malicious code in radicalmockingbirdorange-71 npm...

EUVD-2025-83244

Malicious code in yuni-kue56-ruro npm...

EUVD-2025-70435

Malicious code in fauzi-nasi81-ruro npm...

EUVD-2025-71130

Malicious code in cici-martabak37-ruro npm...

EUVD-2025-60957

The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9. This is due to the plugin exposing sensitive Algolia API keys through the frontend JavaScript code via wplocalizescript without prope...