13378 matches found
MAL-2025-49124 Malicious code in epic-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d1ee5aef53675a9fb367bfbb6e08505b9584394391d2d0c3d6af4529dab29f The package epic-common was found to contain malicious code...
MAL-2025-49174 Malicious code in epic-node-services-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...
MAL-2025-49105 Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...
Malicious code in epic-messages-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9745b9ed602a183e12765c8c88cd916f6b6147eee9c07ab628425f5463adbf9 The package epic-messages-common was found to contain malicious code...
MAL-2025-49125 Malicious code in epic-common-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e76e853a5ddeb0b5baed9270a0858d1df0976691cfd336b223e8208c241371 The package epic-common-node was found to contain malicious code...
CLSA-2025-1761844351 gnutls: Fix of CVE-2025-6395
CVE-2025-6395: fix NULL pointer dereference in gnutlsfigurecommonciphersuite...
CVE-2025-40096
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the enforcer that uses environment variables without sanitation. An attacker can execute arbitrary commands or cause a buffer overflow by supplying crafted input to the affected component. Remediation Upgrade...
DEBIAN-CVE-2025-40094
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...
CVE-2025-40099
In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTLDFSGETREFERRALS - reply smaller than sizeofstruct getdfsreferralrsp - reply with number of referrals smaller than...
Malicious code in esg-odf-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...
MAL-2025-49083 Malicious code in esg-odf-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...
EUVD-2025-36886
Malicious code in esg-odf-common npm...
Malicious Package
Overview esg-odf-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
DEBIAN-CVE-2025-58187
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
Malicious code in ucbuzz-web-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-36845
Malicious code in ucbuzz-web-common npm...
MAL-2025-49062 Malicious code in ucbuzz-web-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822537afdb770182527cdfc92395d4fcc57ab88a98e6958ba68f93eb84f119ef The package ucbuzz-web-common was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview ucbuzz-web-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...