PT-2025-48546

Name of the Vulnerable Software and Affected Versions JumpServer versions prior to 3.10.19 JumpServer versions prior to 4.10.5 Description JumpServer, an open source bastion host and operation and maintenance security audit system, contains an Open Redirect issue. The /core/i18n// API endpoint...

Malicious code in @huntersofbook/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca8379240118a39aaed6773c2c07b3212816dcaa38318220594f99d6d31c3f5 The package @huntersofbook/i18n was found to contain malicious code. Source: google-open-source-security...

`unic-ucd-name` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

EUVD-2007-0001

Malware in sbrugna...

EUVD-2008-1974

Malware in sbrugna...

EUVD-2010-1557

Malware in sbrugna...

EUVD-2015-8391

Malware in sbrugna...

EUVD-2014-1804

Malware in sbrugna...

EUVD-2011-3868

Malware in sbrugna...

EUVD-2017-0173

Malware in sbrugna...

EUVD-2018-17865

Malware in sbrugna...

EUVD-2022-24926

Malicious code in bioql PyPI...

EUVD-2024-20690

Malicious code in bioql PyPI...

moment-timezone

This repository is an add-on for Moment.js, a JavaScript library for working with dates and times. It provides support for timezones, allowing users to easily work with dates and times in different timezones. The repository contains a variety of files, including a Gruntfile.js, which is used to...

MAL-2025-47488 Malicious code in next-plugin-uni-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf38f21fbce8422c8375fdbc547879dab7eea1a9773a78740cee14d4919f95ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-uni-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ff6cfac329bcb3bc726e87d12942ec29cd686c4d4e81223398ed26948b46e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2014-1730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization...

Linux Distros Unpatched Vulnerability : CVE-2014-10077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hashslice in lib/i18n/coreext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service application crash via a call in...

Linux Distros Unpatched Vulnerability : CVE-2018-6102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox URL...

Linux Distros Unpatched Vulnerability : CVE-2017-16654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are...