42474 matches found
Malicious code in node-vite-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c53bdee988880e8c288daeff8bb041022f69c78319375b597edab208129e0621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47487 Malicious code in luma-glow-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47482 Malicious code in eslint-config-detector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c532e5d9ed3c3afdaf7a4a59234c132c6176b491fc96676828c4f0dd5eb415c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cui-travel-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f2686ec4318061b35e9018872a2a9f3a364c77dcf26ccc1bc405d36475d8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47481 Malicious code in dowload_ebok_voir_grand_by_luc_poirier_bdn67 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d72aa930ab4bd1a3165c1c8bd457e5e6c6350f8ead083199565ad6555ed75599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47484 Malicious code in filigrean-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b36c0d6ed8ec6a40757f980d71fc37fd950148adc4bec988b34f6a4bcc83136 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROS-20250922-10
A vulnerability in the getpeername function of the WSGI server for python Waitress is related to the non-release of a resource after a valid exploitation period has expired. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
CVE-2024-13990
MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...
SUSE CVE-2025-21588
unknown...
CVE-2025-59474 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-223M-4RFP-646H vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-QRH5-JG98-CR48 vulnerabilities
Vulnerabilities for packages: jenkins...
CVE-2025-59476 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-223M-4RFP-646H vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-37PP-XMCW-VG4W vulnerabilities
Vulnerabilities for packages: ffmpeg...
Linux Distros Unpatched Vulnerability : CVE-2025-10585
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2025-10535
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143. CVE-2025-10535 Note that...
Linux Distros Unpatched Vulnerability : CVE-2023-53281
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8723bs: Fix locking in rtwjointimeouthandler Commit 041879b12ddb driver...
Linux Distros Unpatched Vulnerability : CVE-2022-50374
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcildisc,serdev: check percpuinitrwsem failure syzbot is reporting NULL pointer dereference at hciuartttyclose 1, for rcusyncenter is called without...