2902 matches found
MAL-2025-429 Malicious code in dropbox-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a4446bf449348fa824663891e88151cde9c81a2ad28680a022caa5fb0711ad The OpenSSF Package Analysis project identified 'dropbox-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
CVE-2024-11931
Removed by vendor...
CVE-2025-0314
Removed by vendor...
CVE-2024-55930
Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...
CVE-2024-55929
A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources...
CVE-2024-55930
CVE-2024-55930 affects Xerox Workplace Suite; root cause is weak default folder permissions that allow unauthorized access, modification, or deletion of files. Connected sources specify affected software as Xerox Workplace Suite and versions prior to 5.6.701.9. Mitigation guidance in PT-2025-3158...
CVE-2025-23088
A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life EOL versions that no longer receive security updates or patches. Mitigation Mitigation for this issue is either not available or the currently...
CVE-2025-23087
A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life EOL versions that no longer receive security updates or patches. Mitigation Mitigation for this issue is either not available or the currently...
MAL-2025-331 Malicious code in another-depconf-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6876487b755ba50effc916826fdb407f0f653893569fef933deb61a21a8d6626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-23088
Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
Exploiting CVE-2024-27198-RCE Vulnerability In this project, I...
CVE-2025-21570
The CVE-2025-21570 entry concerns Oracle Life Sciences Argus Safety (component: Login) with affected version 8.2.3. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, with exploitation requiring user interaction, and can lead to unauthorized update/inse...
CVE-2025-21555
CVE-2025-21555 is confirmed in connected docs as a MySQL Server InnoDB issue affecting Oracle MySQL. Affected versions are 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The vulnerability allows a high-privilege attacker who can reach the server over multiple protocols to cause a hang or...
CVE-2025-21521
CVE-2025-21521 concerns Oracle MySQL Server (Server: Thread Pooling). Affected: MySQL Server versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by an unauthenticated attacker who can access the server over multiple network protocols, potentia...
CVE-2025-21498
...
CVE-2025-21492
...
PT-2025-4817 · Node.Js · Node.Js
The issue affects Node.js, specifically all end-of-life versions up to v17.9.1, which no longer receive support or updates, including security patches. This can expose systems to potential security risks due to unaddressed software vulnerabilities or dependencies. The vulnerable versions of Node....
PT-2025-4818 · Node.Js · Node.Js
The affected software is Node.js, specifically all End-of-Life EOL versions that are no longer supported and do not receive updates, including security patches. These versions may expose systems to potential security risks due to unaddressed software issues or dependencies, such as the use of...