28028 matches found
MAL-2025-185540 Malicious code in arcturus-bellatrix-standard-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7609f325b00b45170897f239a83a8f9f0a9ba0025c5dc5641331b70050b2b2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in standard-altair-izar-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa4728fd5bccd6fec6ad0f4459479b41c02571c837732ad3e92688a04eb9bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177346
Malicious code in paleontology-saturnology-standard-pipe npm...
EUVD-2025-178743
Malicious code in gemini-hydrogeology-panspermia-standard npm...
EUVD-2025-176155
Malicious code in subscription-carina-standard-exec npm...
EUVD-2025-176225
Malicious code in standard-saturnology-webpack-pm2 npm...
Siemens SIMATIC S7-1500 Incorrect Calculation of Buffer Size (CVE-2025-0395)
When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. This plugin only works with Tenable.ot...
Siemens SIMATIC S7-1500 Exposure of Resource to Wrong Sphere (CVE-2019-12904)
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's position is...
WebGPU Mozilla Firefox Code Execution
The vulnerability of the WebGPU component in the Mozilla Firefox browser is related to the improper use of standard resolutions. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.
Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...
EUVD-2025-112228
Malicious code in javascript-pegasus-chariklo-standard npm...
EUVD-2025-111656
Malicious code in lint-staged-gridsome-less-loader-standard npm...
EUVD-2025-122744
Malicious code in rehype-nextjs-xenon-standard npm...
EUVD-2025-115050
Malicious code in configstore-playwright-charon-standard npm...
Malicious code in markdownlint-standard-run-script-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rest-wasat-standard-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e7bdadc36f85812f4103f7b3cbbfe742df9bddb1406e6bbccc939b7e62d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114510
Malicious code in despina-json-standard-ophiuchus npm...
EUVD-2025-122095
Malicious code in semantic-release-impulse-taurus-standard npm...