21314 matches found
Siemens SIMATIC S7-1500 Improper Initialization (CVE-2019-19126)
On the x86-64 architecture, the GNU C Library aka glibc before 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for...
PT-2025-46904
Name of the Vulnerable Software and Affected Versions Socket Firewall versions prior to 0.15.5 Description Socket Firewall is an HTTP/HTTPS proxy server designed to enforce security policies by blocking dangerous packages. Versions of Socket Firewall prior to 0.15.5 are susceptible to arbitrary...
CVE-2025-64407
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407
Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.
EUVD-2025-115154
Malicious code in commitlint-blaze-rollup-cross-env npm...
EUVD-2025-112801
Malicious code in hermes-cross-env-quasar-duplex npm...
EUVD-2025-121547
Malicious code in superagent-cross-env-csv-nodemon npm...
MAL-2025-141249 Malicious code in cross-env-betelgeuse-pm2-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a127b38dc2df9361abb4033f5f1d96762668df04c6aaaf121099671b7d19dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124155
Malicious code in octans-cross-env-config-cassini npm...
EUVD-2025-114860
Malicious code in cross-env-betelgeuse-pm2-mongoose npm...
EUVD-2025-116543
Malicious code in aquarius-webdriver-mocha-hyperion-cross-env npm...
EUVD-2025-111804
Malicious code in less-cross-env-enif-pm2 npm...
Malicious code in unuk-schema-cross-env-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a284a163b533011f80b6796a04ffc656782019c6c3bff8d63b9b8bf081c1baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112649
Malicious code in hyperion-aldebaran-node-config-cross-env npm...
EUVD-2025-114837
Malicious code in cross-env-semantic-ui-dependencies-europa npm...
MAL-2025-144474 Malicious code in lint-toml-janus-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d74b1b010c2a53741c5653bbaf376160ff451dbfab3dc1da0141aae6b48afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143900 Malicious code in jekyll-dagda-google-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...