EUVD-2026-3822

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

MiracleLinux 8 : java-17-openjdk-17.0.10.0.7-2.el8 (AXSA:2024-7459:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7459:03 advisory. OpenJDK: array out-of-bounds access due to missing range check in C1 compiler 8314468 CVE-2024-20918 OpenJDK: incorrect handling of ZIP files with...

EUVD-2026-2373

Due to a Cross-Site Scripting XSS vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious link. When an unsuspecting user clicks this link, the user may be redirected to a site controlled by the attacker. Successful exploitation could allow the attacker to...

EUVD-2026-1518

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in [email protected] Scroll rss excerpt scroll-rss-excerpt allows Reflected XSS.This issue affects Scroll rss excerpt: from n/a through = 5.0...

EUVD-2026-0789

EUVD-2026-0789...

PT-2025-48794

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor...

DEBIAN-CVE-2025-11936

Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to...

CVE-2025-40111

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmwexecbufprocess. All nodes are expected to be cleared in...

MAL-2025-185641 Malicious code in atlas-standard-ursa-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c6f3fc3edf4f35bc1bbdcbf1b42b067954257dafb13d5506a7dc70a03f6785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187046 Malicious code in framework-release-it-fornax-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b7d00319abd576e303397fbe78c43c769e871f30b6725bd501a0203e38c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186377 Malicious code in cross-env-atlas-non-blocking-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c136167139e7da8f2dfa597abcb7ee932a4d5968c1f94382ea87cc5b9e43128d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-daicutamaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fa1bb5458070d0fdf7a50a050abc09a0161bf32412cb7e2eaab9e69a542fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177302 Malicious code in poglymer-ogih-aafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420e7174f37b82e967d340a002b6f7be2fd68fbaa880c50ae84c86423b1884c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176560 Malicious code in nuilva-avaim-rusiavantinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a7341cd834f6724750d74b0a51d7a4186d86a0fa174e069f12125b361ed627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-dafda-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45db12e610b1d9bf971db21a04159dcd06a849a283af574771cc8653eaf5201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172738 Malicious code in afrrri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57e1125a0ac07b5e4a38c4b4f4226358a5b1d33fae73722a86d8e4252379861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170973 Malicious code in biancasantos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38f33c8571d0e0249f792091f60bb946db0b2898cc33f5f3986096104aea6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b59790865902cd72aabb1943031af7549a135b9bdf8c625fe570a6b972b3a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160613 Malicious code in modirai-fuhopia-jabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddbf6c92545ad216b6e7cf3f73243747cd4e10d1df7651b51c248d907bd7ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152147 Malicious code in akabia-aligma-aibava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbe7b0daf3e88c9b807d90a83aaba91c146dfab8880d451bb5db3de76881f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...