MAL-2025-23489 Malicious code in ivy-cyi1h-sycc9-knoll-project (npm)

The package ivy-cyi1h-sycc9-knoll-project was found to contain malicious code...

MAL-2025-23497 Malicious code in ivy-sierra-iu11 (npm)

The package ivy-sierra-iu11 was found to contain malicious code...

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps version 4.10.1 Vulnerability Details CVEID:CVE-2025-22233 DESCRIPTION: CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names...

Malicious code in @ivy-shared-components/testing (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6031 Malicious code in @ivy-shared-components/testing (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @ivy-shared-components/iconslibrary (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-5848 Malicious code in eslint-config-ivy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e1af1d02505f4566c424f21a111d21aab14a0af46e04316c0c84bd47c35a777 The OpenSSF Package Analysis project identified 'eslint-config-ivy' @ 99.99.992 npm as malicious. It is considered malicious because: - The...

Malicious code in eslint-config-ivy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e1af1d02505f4566c424f21a111d21aab14a0af46e04316c0c84bd47c35a777 The OpenSSF Package Analysis project identified 'eslint-config-ivy' @ 99.99.992 npm as malicious. It is considered malicious because: - The...

CVE-2023-41938

A cross-site request forgery CSRF vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules...

CVE-2025-39470

Path Traversal: '.../...//' vulnerability in ThimPress Ivy School ivy-school allows PHP Local File Inclusion.This issue affects Ivy School: from n/a through = 1.6.0...

CVE-2025-39470 WordPress Ivy School theme <= 1.6.0 - Local File Inclusion Vulnerability

Path Traversal: '.../...//' vulnerability in ThimPress Ivy School ivy-school allows PHP Local File Inclusion.This issue affects Ivy School: from n/a through = 1.6.0...

CVE-2025-39470

CVE-2025-39470 describes a path traversal vulnerability in the WordPress theme Ivy School (ThimPress) that enables PHP Local File Inclusion. Affected: Ivy School versions

CVE-2025-39470 WordPress Ivy School <= 1.6.0 - Local File Inclusion Vulnerability

Path Traversal: '.../...//' vulnerability in ThimPress Ivy School allows PHP Local File Inclusion.This issue affects Ivy School: from n/a through 1.6.0...

WordPress plugin Ivy School 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-17254 · Thimpress · Thimpress Ivy School

Name of the Vulnerable Software and Affected Versions: ThimPress Ivy School versions 1.6.0 and earlier Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which allows PHP Local File Inclusion in ThimPress Ivy School. Recommendations: For...

WordPress Ivy School theme <= 1.6.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Ivy School versions = 1.6.0...

Security Bulletin: Multiple Vulnerabilities in Apache Ivy affect IBM Cloud Pak System

Summary Vulnerabilities found in Apache Ivy affect IBM Cloud Pak SystemCVE-2022-46751, CVE-2022-2765,CVE-2022-37866. Vulnerability Details CVEID:CVE-2022-46751 DESCRIPTION: Apache Ivy could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity...

Linux Distros Unpatched Vulnerability : CVE-2022-37866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied pattern that may include placeholders for...

Linux Distros Unpatched Vulnerability : CVE-2022-46751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Restriction of XML External Entity Reference, XML Injection aka Blind XPath Injection vulnerability in Apache Software Foundation Apache Ivy.This issue...

ROS-20241203-20

Apache Ivy package manager vulnerability is related to incorrect path name restriction to a directory with a restricted directory. Exploitation of the vulnerability could allow an attacker acting remotely, gain unauthorized access to the file system Apache Ivy package manager vulnerability is...