EUVD-2025-92745

Malicious code in citra-saguer32-miaww npm...

EUVD-2025-74162

Malicious code in territorialhalibutindigo-40 npm...

EUVD-2025-76570

Malicious code in indirectcapybara-apptea npm...

EUVD-2025-78815

Malicious code in medicalraccoonz3n npm...

EUVD-2025-79940

Malicious code in youngestreindeer0xrequest npm...

EUVD-2025-82364

Malicious code in conway-soluble-pot npm...

DEBIAN-CVE-2025-12447

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2025-49638

Malicious code in plasticflyz3n npm...

EUVD-2025-48813

Malicious code in alonesnakez3n npm...

The vulnerability of the software for deploying and executing AI models developed with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) allows a malicious actor to trigger service failures due to insufficient input data validation.

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure...

EUVD-2025-37943

Dell Command Monitor DCM, versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CGA-7W94-X9XC-39G8

Bulletin has no description...

EUVD-2025-37062

Malicious code in mms-thin-client npm...

GO-2025-4030 Mattermost has an Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Mattermost has an Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...

DEBIAN-CVE-2025-40091

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix too early devlinkfree in ixgberemove Since ixgbeadapter is embedded in devlink, calling devlinkfree prematurely in the ixgberemove path can lead to UAF. Move devlinkfree to the end. KASAN report: BUG: KASAN:...

CVE-2025-60595

SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution...

BELL-CVE-2025-40062

Bulletin has no description...

BELL-CVE-2025-40040

Bulletin has no description...

PT-2025-44296

Name of the Vulnerable Software and Affected Versions Jenkins Curseforge Publisher Plugin version 1.0 Description The Jenkins Curseforge Publisher Plugin version 1.0 does not mask API Keys displayed on the job configuration form. This increases the potential for attackers to observe and capture...

AZL-69455 CVE-2025-61107 affecting package frr for versions less than 9.1.1-5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextprefprefsid function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted LSA Update packet...