13092 matches found
CVE-2025-0290 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive...
CVE-2024-0150
NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering...
CVE-2024-45341 vulnerabilities
Vulnerabilities for packages: sbom-scorecard, delve, shfmt, kubernetes-dashboard-auth, secrets-store-csi-driver-provider-azure, slsa-verifier, runc, controller-gen, wire-go, boring-registry, src-fingerprint, checksec, rancher-loglevel, temporal, glow, sftpgo-plugin-eventsearch, yace, go-md2man,...
CVE-2024-45336 vulnerabilities
Vulnerabilities for packages: sbom-scorecard, delve, shfmt, kubernetes-dashboard-auth, secrets-store-csi-driver-provider-azure, slsa-verifier, runc, controller-gen, wire-go, boring-registry, src-fingerprint, checksec, rancher-loglevel, temporal, glow, sftpgo-plugin-eventsearch, yace, go-md2man,...
MAL-2025-598 Malicious code in compound-protocol-alpha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03d150fbb080030ea3445a65033db1386bff9efd41db369c041100a4eedbcea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-1325 · Unknown · Heifdecoderimpl
Name of the Vulnerable Software and Affected Versions: HeifDecoderImpl affected versions not specified Description: The issue is related to a possible out-of-bounds read in HeifDecoderImpl::getScanline due to incorrect input validation. This could lead to remote information disclosure without the...
CVE-2025-24537
The CVE-2025-24537 CSRF vulnerability affects WordPress The Events Calendar (the-events-calendar) up to and including version 6.7.0. Multiple sources (NVD, Red Hat, CVE List, CNNVD, CIRCL, etc.) confirm Cross-Site Request Forgery exposure. Root cause details are not fully disclosed in the provide...
CVE-2025-0695
CVE-2025-0695 affects Cesanta Frozen library prior to version 1.7. The vulnerability is an unbounded Allocation of Resources Without Limits or Throttling, allowing an attacker to crash the component embedding the library by supplying malicious JSON input. Affected scope is Cesanta Frozen versions
BIT-CILIUM-OPERATOR-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...
MAL-2025-1994 Malicious code in requesttss (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 12a8bc9313963cfa671547d93bfa32236afe6b7dfeeec048633a547aa05dbc12 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...
MAL-2025-1990 Malicious code in reques (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7f1c117835fcc30eb4ff0ff5c9426d10011537b644ddea270fcdaba17ed7050e Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...
MAL-2025-583 Malicious code in casier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08fbcdfa482a4508e9f9c2f90db55d75e512d0876a2465d216815c469f07fe52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-24360 Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Nuxt is an open-source web development framework for Vue.js. Starting in version 3.8.1 and prior to version 3.15.3, Nuxt allows any websites to send any requests to the development server and read the response due to default CORS settings. Users with the default server.cors option using Vite...
CGA-PG5H-FW7M-RGW8
Bulletin has no description...
BELL-CVE-2024-57947
Bulletin has no description...
MAL-2025-521 Malicious code in lyft-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45ea901132edd2a569f451644d222beedfd715a037c809451b5ac84bd1e506a1 The OpenSSF Package Analysis project identified 'lyft-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-462 Malicious code in godaddy-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74e151c33b11ff2a41be8c1fcbb4fd87925b935207dff028869ac9e931414b9a The OpenSSF Package Analysis project identified 'godaddy-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-390 Malicious code in apple-database (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11bd736afb32f1fa9fa0d7c3c7179f15862943e15465e8adb4b6ccea13130742 The OpenSSF Package Analysis project identified 'apple-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...