CVE-2025-13161

IQ-Support (IQ Service International) is affected by CVE-2025-13161, describing an Unauthenticated Arbitrary File Read via Relative Path Traversal that allows downloading arbitrary system files. The available connected documents identify the vulnerable component as IQ-Support but do not specify a...

EUVD-2025-180540

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques...

PT-2025-46938

Name of the Vulnerable Software and Affected Versions IQ-Support affected versions not specified Description IQ-Support, developed by IQ Service International, has an issue that allows unauthenticated remote attackers to access specific APIs and obtain sensitive information from the internal...

CVE-2025-36250

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server formerly known as NIM master service nimesis could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in...

EUVD-2025-117289

Malicious code in international-amaranth-booby npm...

EUVD-2025-117288

Malicious code in international-copper-lion npm...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-29177)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

EulerOS 2.0 SP10 : icu (EulerOS-SA-2025-2416)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

EUVD-2025-97959

Malicious code in internationalwoodpeckerz3n npm...

EUVD-2025-97960

Malicious code in internationalhedgehogz3n npm...

EUVD-2025-97961

Malicious code in internationalferretz3n npm...

EUVD-2025-104474

Malicious code in internationalcrowz3n npm...

EUVD-2025-104475

Malicious code in internationalcobraz3n npm...

EUVD-2025-104473

Malicious code in internationalfireflyz3n npm...

MAL-2025-117500 Malicious code in tomi-otak-otak3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4335d2a5bd390f939b65e0ca3ba620eca95679febc59e02df4b78635b8f4fc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74517

Malicious code in internationaldonkeytomato-90 npm...

EUVD-2025-74516

Malicious code in internationallarksapphire-67 npm...

EUVD-2025-76522

Malicious code in internationalmagpie-notthedev npm...

EUVD-2025-76521

Malicious code in internationalswordtail-appteadev npm...

MAL-2025-94019 Malicious code in different_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae8679d29d9244e377331f1a6894bbc0ef7bfe5f7e58b711e9a10cbac1de4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...