MAL-2025-45394 Malicious code in nuxtjs-backend-whitedwarf-bootes (npm)

The package nuxtjs-backend-whitedwarf-bootes was found to contain malicious code...

MAL-2025-43628 Malicious code in blackhole-hyperion-farout-backend (npm)

The package blackhole-hyperion-farout-backend was found to contain malicious code...

Sensitive Information Disclosure

@backstage/plugin-scaffolder-backend is vulnerable to Sensitive Information Disclosure. The vulnerability is due to duplicate logging of input values in the fetch:template action, which could expose sensitive data if $ secrets.x is used as an argument...

GHSA-79J6-G2M3-JGFW vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

CVE-2025-9141 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

ELADMIN 授权问题漏洞

ELADMIN is a backend management system for elunez individual developers. An authorization issue vulnerability exists in ELADMIN version 1.1, which stems from improper authorization of the function deleteFile in the component LocalStorageController...

CVE-2025-0165

IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

[SECURITY] Fedora 42 Update: rocm-rpp-6.3.1-3.fc42

AMD ROCm Performance Primitives RPP library is a comprehensive, high-performance computer vision library for AMD processors that have HIP, OpenCL, or CPU backends...

CVE-2025-41702

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key...

Linux Distros Unpatched Vulnerability : CVE-2023-41337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is configured to listen to multiple addresses or...

Linux Distros Unpatched Vulnerability : CVE-2019-3871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building ...

Linux Distros Unpatched Vulnerability : CVE-2022-2832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/glbackend.cc that may lead to loss of confidentiality and...

MAL-2025-41980 Malicious code in example-backend (npm)

The package example-backend was found to contain malicious code...

Malicious code in example-backend (npm)

The package example-backend was found to contain malicious code...

CVE-2025-48956 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

GHSA-5CMR-4PX5-23PC vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

GHSA-RXC4-3W6R-4V47 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

CVE-2025-57759

Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no...

CVE-2025-57759 Contao has improper privilege management for page and article fields

Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no...

CVE-2025-57759 Contao has improper privilege management for page and article fields

Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no...