10232 matches found
MAL-2025-140095 Malicious code in bootes-vulcan-transport-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139568 Malicious code in arcturus-dependencies-transport-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d815a4e59b1e9af12dc14986473fddc308775a2b32f5d80b55972e49c4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147682 Malicious code in sass-loader-quasar-transport-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20c0ab48c9f324f56d5d61c41b6df53b2f9637aa4732f761ac74b9eda2b6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122448
Malicious code in rocket-node-sass-transport-buffer npm...
EUVD-2025-113287
Malicious code in ganymede-transport-yildun-npm npm...
MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111722
Malicious code in library-transport-iota-arcturus npm...
EUVD-2025-124738
Malicious code in morgan-less-loader-fusion-transport npm...
MAL-2025-149146 Malicious code in version-transport-vuepress-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1c58e8fd28bd4e5dac34829ef4fa7f09faf7486ea71e6a4ee8f7d6828d4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121128
Malicious code in transport-remark-dorado-ignite npm...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990804)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990804 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sastransportportadd Port is allocated by...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990746)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990746 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatportadd In atatportadd, the return value of...
Linux Distros Unpatched Vulnerability : CVE-2025-40115
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpt3sas: Fix crash in transport port remove by using iocinfo During mpt3sastransportportremove, messages were logged with devprintk against...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990797)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990797 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatlinkadd In atatlinkadd, the return value of...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990791)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990791 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatdevadd In atatdevadd, the return value of...
CVE-2025-60720 Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
...
CVE-2025-60720 Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
...
CVE-2025-60720
Technical details for CVE-2025-60720 (TDX.sys) are not provided in the Connected documents. The Initial Description notes local privilege escalation via a buffer over-read; no vendor/version/patch details are supplied here; monitor for updates.
kernel: nvmet: fix out-of-bounds access in nvmet_enable_port
An out-of-bounds access vulnerability was found in the Linux kernel's nvme subsystem in the nvmetenableport function. The vulnerability can occur when a port is enabled without a transport type configured, causing the function to use the NVMFTRTYPEMAX value 255 as an array index into the...
