Linux Distros Unpatched Vulnerability : CVE-2025-38226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern...

PT-2025-33486 · Autodesk · Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can trigger an Out-of-Bounds Read issue. A malicious actor can exploit this to cause a crash, read...

PT-2025-33487 · Autodesk · Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can trigger an uninitialized variable issue. A malicious actor can leverage this to cause a crash, read...

HCL BigFix SaaS Authentication Service 安全漏洞

HCL BigFix SaaS Authentication Service is an endpoint management platform from HCL India. A security vulnerability exists in HCL BigFix SaaS Authentication Service that stems from the image upload feature not adequately validating the image format, which could lead to cross-site scripting attacks...

Linux Distros Unpatched Vulnerability : CVE-2019-11719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When importing a curve25519 private key in PKCS8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services...

Malicious code in style-format (npm)

The package style-format was found to contain malicious code...

Malicious code in format-text (npm)

The package format-text was found to contain malicious code...

MAL-2025-34079 Malicious code in stream-format (npm)

The package stream-format was found to contain malicious code...

MAL-2025-15528 Malicious code in bb-babelfish-format (npm)

The package bb-babelfish-format was found to contain malicious code...

MAL-2025-30742 Malicious code in prompts-auth-oauth-markdown-pdf (npm)

The package prompts-auth-oauth-markdown-pdf was found to contain malicious code...

Malicious code in bb-babelfish-format (npm)

The package bb-babelfish-format was found to contain malicious code...

MAL-2025-34287 Malicious code in swicks (npm)

The package swicks was found to contain malicious code...

Malicious code in new-format (npm)

The package new-format was found to contain malicious code...

Malicious code in stream-format (npm)

The package stream-format was found to contain malicious code...

Malicious code in browser-html-to-rtf (npm)

The package browser-html-to-rtf was found to contain malicious code...

Malicious code in @zalastax/nolb-json-x (npm)

The package @zalastax/nolb-json-x was found to contain malicious code...

MAL-2025-27361 Malicious code in new-format (npm)

The package new-format was found to contain malicious code...

MAL-2025-34115 Malicious code in style-format (npm)

The package style-format was found to contain malicious code...

MAL-2025-20789 Malicious code in format-text (npm)

The package format-text was found to contain malicious code...

CVE-2025-8714

Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pgdumpall is also affected. pgrestore is affected...