17236 matches found
CVE-2018-25145
Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/mcli/', and '/tmp' to access syst...
amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2025-14929 via transformers (4.52.1)
transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...
biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2025-14929 via transformers (4.54.1)
transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2025-14929...
bacpipe (>=1.1.0, <=1.3.0), certora-patrol (>=0.1.3, <=0.1.17) +9 more potentially affected by CVE-2025-14929 via transformers (4.56.0)
transformers PYPI version 4.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bacpipe =1.1.0, =0.1.3, =0.1.18, =0.2.1a0, =0.3.2, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2025-14929 Source advisory: OSV:PYSEC-2025-2...
homeassistant-cli (0.2.0) potentially affected by CVE-2025-65713 via homeassistant (0.83.3)
homeassistant PYPI version 0.83.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-cli 0.2.0 Source cves: CVE-2025-65713 Source advisory: OSV:GHSA-PP3G-XMM4-5CW9...
Malicious code in chalk-cli (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192896 Malicious code in chalk-cli (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-26787: External Control of Critical State Data
An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2. The Admin CLI command used to configure Certificate access to the initial startup of the container sets a property of "allowany" to allow any user with a valid and trusted client auth...
CVE-2025-26787
An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2. The Admin CLI command used to configure Certificate access to the initial startup of the container sets a property of "allowany" to allow any user with a valid and trusted client auth...
CVE-2025-26787
Keyfactor SignServer versions prior to 7.2 are vulnerable to a logic error in the container startup process. The Admin CLI command , intended to set a default "allowany" property only during the initial startup, incorrectly executes on every container restart. This causes the system to reset conf...
CVE-2025-65637 affecting package cf-cli for versions less than 8.4.0-26
CVE-2025-65637 affecting package cf-cli for versions less than 8.4.0-26. A patched version of the package is available...
Malware in adk-cli
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in adk-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa79ad3f20525e947d85a4aef9c78e0c79c2377ac01d03bbb8153dc256efe7c The package adk-cli was found to contain malicious code. Source: ghsa-malware 201d1358b161ed151cde448595832eccef539099208ee82dec74ea4fa1ddb8a8 Any...
EUVD-2025-204502
Malicious code in adk-cli npm...
Malicious Package
Overview adk-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2025-192618 Malicious code in adk-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa79ad3f20525e947d85a4aef9c78e0c79c2377ac01d03bbb8153dc256efe7c The package adk-cli was found to contain malicious code. Source: ghsa-malware 201d1358b161ed151cde448595832eccef539099208ee82dec74ea4fa1ddb8a8 Any...
CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20
CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20. A patched version of the package is available...
@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0, <=2.0.2)
@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...
@tinacms/app (>=2.3.12, <=2.3.15), @tinacms/cli (>=2.0.0, <=2.0.3) +1 more potentially affected by CVE-2025-68278 via tinacms (>=3.0.0, <=3.1.0)
tinacms NPM version =3.0.0, =2.3.12, =2.0.0, =0.1.12, =0.1.15 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...