4509 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-29421
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code. CVE-2024-29421...
Authorization Bypass in MLflow Basic Auth (unprotected Flask/GraphQL routes)
This report is not public...
CVE-2025-48160 WordPress Caliris <= 1.5 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CocoBasic Caliris caliris-wp allows PHP Local File Inclusion.This issue affects Caliris: from n/a through = 1.5...
Dell PowerEdge Platform 14G AMD BIOS Information Disclosure Vulnerability
Dell PowerEdge Platform 14G AMD BIOS is a BIOS system from Dell USA. The Dell PowerEdge Platform 14G AMD BIOS suffers from an information disclosure vulnerability that originates from end-of-buffer memory location access, which can be exploited by an attacker to gain access to internal system...
CVE-2025-38584
In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back to the initial commit. A reference count is taken at the start of the process in padatadoparallel, and released at the end in...
Linux Distros Unpatched Vulnerability : CVE-2025-8264
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inje...
CVE-2024-12575
CVE-2024-12575 relates to the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (≤ 5.8.9). The vulnerability is an unauthenticated basic information exposure exposed via the ajax action ays_finish_poll, allowing attackers to retrieve admin email information from poll respon...
Malicious code in qdrant-node-js-basic-example (npm)
The package qdrant-node-js-basic-example was found to contain malicious code...
Malicious code in test-mlw2-cleck-gault-nidal-basic (npm)
The package test-mlw2-cleck-gault-nidal-basic was found to contain malicious code...
MAL-2025-15505 Malicious code in Basic-Material-framework (npm)
The package Basic-Material-framework was found to contain malicious code...
MAL-2025-15506 Malicious code in basic-webpack-project (npm)
The package basic-webpack-project was found to contain malicious code...
MAL-2025-35086 Malicious code in test-mlw2-cleck-gault-nidal-basic (npm)
The package test-mlw2-cleck-gault-nidal-basic was found to contain malicious code...
MAL-2025-28498 Malicious code in ort-rn-basic-usage (npm)
The package ort-rn-basic-usage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in ort-rn-basic-usage (npm)
The package ort-rn-basic-usage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)
prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...
Malicious code in basic-webpack-project (npm)
The package basic-webpack-project was found to contain malicious code...
Malicious code in Basic-Material-framework (npm)
The package Basic-Material-framework was found to contain malicious code...
Malicious code in test-mlw2-pedro-basic (npm)
The package test-mlw2-pedro-basic was found to contain malicious code...