1552 matches found
MAL-2025-4389 Malicious code in prettier-config-rth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baf2a5f3efec1eace5c6720887b40bd8a5019168357ff749e8eef0b03c4b2a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4373 Malicious code in mbm-dgacha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584950211093c6cada6fd340d94a5749b3ee5e10049a6d57b9d3f1c494050fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4324 Malicious code in com.unity.netcode.gameobjects (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 131cc29f9c925613b77fd6e6c06f43433bdc5a9511461af56fd519562408c3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-9118
There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Affected product versions include:AIS-BW80H-0...
CVE-2020-9250
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. Vulnerability ID: HWPSIRT-2019-12302 Th...
MAL-2025-4187 Malicious code in o-date (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4181 Malicious code in hello-user-test-npm-com-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4221 Malicious code in keybard (PyPI)
--- -= Per source details. Do not edit below this line.=-...
RHSA-2025:8056 Red Hat Security Advisory: kernel security update
Bulletin has no description...
OPENSUSE-SU-2025:15135-1 govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250515T200012-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15132-1 dante-1.4.4-1.1 on GA media
These are all security issues fixed in the dante-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-4039 Malicious code in wdpr-ra-javascript-native-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e2b40d8e2ee8d311cf5e007c4480255217d359bdde3c42115e42ad42f35dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3938 Malicious code in pootle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e85bef7e8a01d18636b40c7543cadd257472b0b984989ba4ca747f6c4c6f5a The OpenSSF Package Analysis project identified 'pootle' @ 9.9.10 npm as malicious. It is considered malicious because: - The package communicat...
CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
OPENSUSE-SU-2025:15124-1 ruby3.4-rubygem-rails-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rails-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15100-1 python311-oauthlib-3.2.2-5.4 on GA media
These are all security issues fixed in the python311-oauthlib-3.2.2-5.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15119-1 ruby3.4-rubygem-kramdown-2.4.0-1.15 on GA media
These are all security issues fixed in the ruby3.4-rubygem-kramdown-2.4.0-1.15 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15107-1 python311-ujson-5.10.0-1.5 on GA media
These are all security issues fixed in the python311-ujson-5.10.0-1.5 package on the GA media of openSUSE Tumbleweed...
Malicious code in lcs-ui-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b66ec079f142a51c33d484015aab0384b514dca3415e27b84138f92dd2ea818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...