2012 matches found
Malicious code in mixedzone-curate-frontend-v3 (npm)
The package mixedzone-curate-frontend-v3 was found to contain malicious code...
MAL-2025-10556 Malicious code in @zalastax/nolb-_v3 (npm)
The package @zalastax/nolb-v3 was found to contain malicious code...
MAL-2025-28259 Malicious code in op-payment-widget-v3 (npm)
The package op-payment-widget-v3 was found to contain malicious code...
Malicious code in kz-fe-v3 (npm)
The package kz-fe-v3 was found to contain malicious code...
MAL-2025-26509 Malicious code in mixedzone-curate-frontend-v3 (npm)
The package mixedzone-curate-frontend-v3 was found to contain malicious code...
CVE-2025-55199
A flaw was found in helm.sh/helm/v3. A maliciously crafted JSON Schema file can trigger excessive memory consumption during Helm Chart validation, leading to an out-of-memory OOM termination. A remote attacker, requiring user interaction to provide the crafted file, can trigger this condition. Th...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Do not enable interrupts in itsirqsetvcpuaffinity. The following call-chain results in the enabling of interrupts in a nested interrupt-disabled section: irqsetvcpuaffinity irqgetdesclock rawspinlockirqsave --...
Malicious code in dc-spectrum-v3-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f90b2269a7759d64a1656b51e7f35e99c4005a61cd9012d931d6965bd544aa1 Any computer that has this package installed or running should be considered...
MAL-2025-4697 Malicious code in dc-spectrum-v3-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f90b2269a7759d64a1656b51e7f35e99c4005a61cd9012d931d6965bd544aa1 Any computer that has this package installed or running should be considered...
PT-2025-23783
Name of the Vulnerable Software and Affected Versions EIBPORT V3 KNX versions 3.9.8 and earlier EIBPORT V3 KNX GSM versions 3.9.8 and earlier Description This issue allows a successful attacker to gain unauthorized access to a configuration web page delivered by the integrated web server of...
The vulnerability of the web_snmp_v3host_add_post() function in PLANET Technology’s microcontroller software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the websnmpv3hostaddpost function in PLANET Technology’s microcontroller software stems from the issue of the operation exceeding the buffer boundaries in memory when processing the hostip parameter. Exploiting this vulnerability allows an attacker to compromise the...
CVE-2024-55655
sigstore-python is a Python tool for generating and verifying Sigstore signatures. Versions of sigstore-python newer than 2.0.0 but prior to 3.6.0 perform insufficient validation of the "integration time" present in "v2" and "v3" bundles during the verification flow: the "integration time" is...
CVE-2023-23452
Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...
CVE-2023-27225
A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...
CVE-2022-38176
An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as...
CVE-2022-22508
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type...
CVE-2021-43675
Lychee-v3 3.2.16 is affected by a Cross Site Scripting XSS vulnerability in php/Access/Guest.php. The function exit will terminate the script and print the message to the user. The message will contain albumID which is controlled by the user...
CVE-2021-42970
Cross Site Scripting XSS vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter...
CVE-2021-25663
A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...