EUVD-2025-198981

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user...

CVE-2025-48511

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service...

CVE-2025-48511

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service...

EUVD-2025-199007

Malicious code in url-encode-decode npm...

CVE-2025-48511

AMD uProf (μProf) contains an improper input validation vulnerability that can allow a local attacker to write to an arbitrary physical address, potentially causing a crash or denial of service. Affected environments include Windows, Linux, and FreeBSD per CNVD/CVEs. The root cause and impact are...

CVE-2025-48511

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service...

CVE-2025-36112

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could reveal sensitive server IP configuration information to an unauthorized user...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @ensdomains/react-ens-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c136b64e27be18d7c3aeebbcd6a31479adacc70efae5bbf586009180e51098a The package @ensdomains/react-ens-address was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190809 Malicious code in @ensdomains/react-ens-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c136b64e27be18d7c3aeebbcd6a31479adacc70efae5bbf586009180e51098a The package @ensdomains/react-ens-address was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198868

Malicious code in @ensdomains/react-ens-address npm...

Malicious code in crypto-addr-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900adb7a0d7713cca5ccdc793971f3489553656e4e132b80293ad56c55d05b2a The package crypto-addr-codec was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198697

Malicious code in crypto-addr-codec npm...

Malicious code in @ensdomains/address-encoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8264ecb2af0b5028f08af1a108f7fe73cd1cbe55ea2cb7102a3e28b2e1052e The package @ensdomains/address-encoder was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190665 Malicious code in @ensdomains/address-encoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8264ecb2af0b5028f08af1a108f7fe73cd1cbe55ea2cb7102a3e28b2e1052e The package @ensdomains/address-encoder was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198699

Malicious code in @ensdomains/address-encoder npm...

Liferay Portal License Manager Detected

The target Liferay portal instance exposes information about the license state and the server. An unauthenticated attacked could leverage these information, such as server internal IP addresse and hostname, liferay version and license owner to conduct further attacks. No source data...

Oracle Fusion Middleware Identity Manager authentication bypass

Added: 11/24/2025 Background Oracle Fusion Middleware is a platform for creating and running applications. Problem An authentication bypass vulnerability in the Identity Manager component allows remote attackers to execute arbitrary commands by appending ;.wadl to a URL. Resolution See Oracle Pat...

CVE-2025-48511: Improper Validation of Specified Index, Position, or Offset in Input

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service...

The vulnerability of the `ceph_netfs_issue_read()` function in the `fs/ceph/addr.c` module, which is part of the Ceph distributed file system support for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the cephnetfsissueread function in the fs/ceph/addr.c module of the Ceph distributed file system support module for Linux operating systems is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...