CVE-2025-25196 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

CGA-C2GH-HXGQ-V5X7

Bulletin has no description...

CGA-3QP8-WHQR-P7QJ

Bulletin has no description...

CVE-2025-26773

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through = 5.5.0...

CVE-2025-0001

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability...

CVE-2025-1007 Improper Authorization in /user/namespace/{namespace}/details

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...

MAL-2025-1478 Malicious code in byted-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf324dae7bb985ac37aa0fff183e7f60d94c61c8b95b73049e79fcb49a52c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2025-1125

Bulletin has no description...

BELL-CVE-2024-45782

Bulletin has no description...

BELL-CVE-2024-45778

Bulletin has no description...

BELL-CVE-2024-45780

Bulletin has no description...

CVE-2025-1370

A vulnerability, which was classified as critical, has been found in MicroWorld eScan Antivirus 7.0.32 on Linux. Affected by this issue is the function sprintf of the file epsdaemon of the component Autoscan USB. The manipulation leads to os command injection. An attack has to be approached...

CGA-9964-FHWF-8R48

Bulletin has no description...

CGA-25PW-P83C-P94H

Bulletin has no description...

CGA-X82H-7Q28-R9GR

Bulletin has no description...

BELL-CVE-2025-1371

Bulletin has no description...

MAL-2025-1390 Malicious code in suvauxlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5b9068f18c537a559453b7350d3d2a6fc61ea7a7988f11236ee6909550a41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3014 Malicious code in w3socket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 729a8001d69369db2b822c1a13ba9363d3dad46299a6ced4e52ab604c3261ec4 web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

DLA-4056-1 golang-glog - security update

Bulletin has no description...

CVE-2025-26779

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a through = 2.1.0...