26670 matches found
EUVD-2025-176225
Malicious code in standard-saturnology-webpack-pm2 npm...
EUVD-2025-180348
Malicious code in arcturus-bellatrix-standard-miranda npm...
EUVD-2025-177346
Malicious code in paleontology-saturnology-standard-pipe npm...
EUVD-2025-178953
Malicious code in express-standard-development-astrometry npm...
EUVD-2025-177513
Malicious code in nucleosynthesis-standard-pulsar-non-blocking npm...
Malicious code in standard-seismology-sync-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0161e8e9100e0895c5f49e6260a519a05cbc55a4cb32eadbd60fe2619b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178743
Malicious code in gemini-hydrogeology-panspermia-standard npm...
EUVD-2025-179364
Malicious code in deimos-phoenix-impulse-standard npm...
EUVD-2025-176229
Malicious code in standard-cygnus-quasarjet-joviology npm...
MAL-2025-185540 Malicious code in arcturus-bellatrix-standard-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7609f325b00b45170897f239a83a8f9f0a9ba0025c5dc5641331b70050b2b2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Siemens SIMATIC S7-1500 Incorrect Calculation of Buffer Size (CVE-2025-0395)
When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. This plugin only works with Tenable.ot...
Siemens SIMATIC S7-1500 Exposure of Resource to Wrong Sphere (CVE-2019-12904)
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's position is...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.
Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...
EUVD-2025-123350
Malicious code in process-standard-miranda-standard npm...
Malicious code in zephyr-standard-arcturus-selenium (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfb0d4f3fef5875a28ff7fe0d5c62702914e16fec1826a64f35118d8a99b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116229
Malicious code in babel-standard-nightwatch-figures npm...
EUVD-2025-112535
Malicious code in indus-standard-semantic-release-prompts npm...
EUVD-2025-113411
Malicious code in frontend-chakra-ui-standard-colors npm...
Malicious code in rest-wasat-standard-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e7bdadc36f85812f4103f7b3cbbfe742df9bddb1406e6bbccc939b7e62d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...