EUVD-2025-52077

Malicious code in shared-chocolate-constrictor npm...

EUVD-2025-52076

Malicious code in shared-chocolate-dog npm...

EUVD-2025-52073

Malicious code in shared-tan-urial npm...

PT-2025-48834

Уязвимость программного средства управления проектами и задачами JetBrains YouTrack связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие ограничения безопасности...

PT-2025-46722

Name of the Vulnerable Software and Affected Versions Wasmtime versions 24.0.0 through 24.0.4 Wasmtime versions 36.0.0 through 36.0.2 Wasmtime versions 37.0.0 through 37.0.2 Wasmtime versions 38.0.0 through 38.0.3 Description Wasmtime’s Rust embedder API has an issue where a WebAssembly shared...

CVE-2025-40763: Uncontrolled Search Path Element

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...

PT-2025-46511

Name of the Vulnerable Software and Affected Versions Microsoft Wireless Provisioning System affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate...

VulnCheck KEV: CVE-2025-62215

Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access...

PT-2025-46322

Name of the Vulnerable Software and Affected Versions Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress versions prior to 1.1.28 Description The Hydra Booking plugin for WordPress is susceptible to unauthorized booking cancellations. This is caused by the use of...

Incorrect OAuth Passthrough in Grafana Snowflake Datasource

Grafana is an open-source platform for monitoring and observability. The Grafana-Snowflake-Datasource is a plugin allowing Grafana to visualize data from Snowflake Versions between 1.5.0 and 1.14.0 are vulnerable to a bug when Oauth passthrough is enabled, and multiple users are using the same...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...

EUVD-2025-49401

Malicious code in sharedarmadilloz3n npm...

EUVD-2025-49399

Malicious code in sharedunicornz3n npm...

EUVD-2025-49400

Malicious code in sharedlobsterz3n npm...

Microsoft Graphics Component Resource Management Error Vulnerability

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Graphics Component that stems from improper synchronization of shared resources and can be exploited by an attacker to cause a local elevation o...

EUVD-2025-38434

Malicious code in @hemihatchlings/shared npm...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

The vulnerability of the “Red Database” database management system, related to synchronization errors when using a common resource, allows a perpetrator to cause a server service failure.

The vulnerability of the “Red Database” database management system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the server...

The vulnerability of the ConfiguredPlugin::release function in the PluginManager.cpp module of the “Red Database” database management system allows a hacker to cause a service failure on the server.

The vulnerability in the ConfiguredPlugin::release function of the PluginManager.cpp module of the database management system “Red Database” is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the...

PT-2025-49377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/panthor subsystem related to shared memory shmem handling. Specifically, the shmem layer zeroes out new pages using cached mappings. Witho...