227 matches found
0xtrails (>=0.1.9, <=0.2.2), @aarc-dev/deposit-widget (>=0.4.2, <=0.4.47) +4 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2, <=3.2.14)
@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.4.2, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2025-59430 Source advisory: OSV:GHSA-VH3F-QPPR-J97F...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free through improper handling of web content. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox-ESR to version 140.3 or...
archivefs (>=1.0.0, <=1.0.1), arcon_compiler (>=0.1.0, <=0.1.1) +83 more potentially affected by unknown CVE via daemonize (>=0.2.3, <=0.5.0)
daemonize CARGO version =0.2.3, =1.0.0, =0.1.0, =0.3.1, =0.2.0, =0.5.0, =3.0.0, =0.1.0, =0.1.3, =0.0.1, =0.4.0, =0.1.0, =0.1.2, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0069...
Linux Distros Unpatched Vulnerability : CVE-2024-22654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. CVE-2024-22654 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2025-3409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argumen...
Linux Distros Unpatched Vulnerability : CVE-2017-6596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the message boards feature available through the web interface. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious scripts into messages. Details Cross-sit...
Malicious code in @npmshivamkalsi/blanditiis-architecto-iusto-asperiores (npm)
The package @npmshivamkalsi/blanditiis-architecto-iusto-asperiores was found to contain malicious code...
MAL-2025-8202 Malicious code in @kollusietea/quidem-enim-ad-numquam (npm)
The package @kollusietea/quidem-enim-ad-numquam was found to contain malicious code...
MAL-2025-35466 Malicious code in test-mlw2-gunks-draps-haffs-terry (npm)
The package test-mlw2-gunks-draps-haffs-terry was found to contain malicious code...
MAL-2025-8501 Malicious code in @malware-test-birds-deist-klutz-loper/test-mlw3-birds-deist-klutz-loper (npm)
The package @malware-test-birds-deist-klutz-loper/test-mlw3-birds-deist-klutz-loper was found to contain malicious code...
MAL-2025-8660 Malicious code in @malware-test-gated-atria-wrens-error/test-mlw3-gated-atria-wrens-error (npm)
The package @malware-test-gated-atria-wrens-error/test-mlw3-gated-atria-wrens-error was found to contain malicious code...
MAL-2025-7998 Malicious code in @hishpr/adipisci-rerum-repudiandae-eligendi (npm)
The package @hishpr/adipisci-rerum-repudiandae-eligendi was found to contain malicious code...
MAL-2025-7572 Malicious code in @crabas0npm/tempore-laudantium-vero-beatae (npm)
The package @crabas0npm/tempore-laudantium-vero-beatae was found to contain malicious code...
MAL-2025-7676 Malicious code in @crabas0npm2/molestias-accusantium-perspiciatis (npm)
The package @crabas0npm2/molestias-accusantium-perspiciatis was found to contain malicious code...
MAL-2025-8249 Malicious code in @landmineaknpm2/error-optio-quidem (npm)
The package @landmineaknpm2/error-optio-quidem was found to contain malicious code...
MAL-2025-31684 Malicious code in raspberry-strawberry-zulu-choiw (npm)
The package raspberry-strawberry-zulu-choiw was found to contain malicious code...
MAL-2025-7162 Malicious code in @crabas0npm/aliquam-quidem-voluptas (npm)
The package @crabas0npm/aliquam-quidem-voluptas was found to contain malicious code...