1118 matches found
EUVD-2025-35897
Wasmtime vulnerable to segfault when using component resources...
SUSE CVE-2025-61595
MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...
CVE-2025-62711
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a...
CVE-2025-62711 Wasmtime vulnerable to segfault when using component resources
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a...
CVE-2025-62711 Wasmtime vulnerable to segfault when using component resources
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a...
CVE-2025-62711
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a...
CVE-2025-62711: Improper Handling of Exceptional Conditions
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a...
Malicious code in skiko-js-wasm-runtime (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48868 Malicious code in skiko-js-wasm-runtime (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48869 Malicious code in skiko-wasm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in skiko-wasm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
The vulnerabilities of the node-api, node-bindings, and duckdb-wasm packages of the DuckDB relational database management system allow attackers to gain unauthorized access to protected information.
The vulnerability of the node-api, node-bindings, and duckdb-wasm packages in the DuckDB database management system is related to the presence of undeclared capabilities. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
EUVD-2020-10302
Malware in sbrugna...
EUVD-2017-6822
Malware in sbrugna...
EUVD-2021-0466
Malware in sbrugna...
EUVD-2019-17233
Malware in sbrugna...
EUVD-2019-17235
Malware in sbrugna...
EUVD-2018-3414
Malware in sbrugna...