RUSTSEC-2025-0080 `unic-common` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

`unic-common` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

SUSE CVE-2025-60358

radare2 v.5.9.8 and before contains a memory leak in the function loadrelocations...

CVE-2025-62171

ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating...

CVE-2025-60514

Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts...

MalCVE: Malware Detection and CVE Association Using Large Language Models

Malicious software attacks are having an increasingly significant economic impact. Commercial malware detection software can be costly, and tools that attribute malware to the specific software vulnerabilities it exploits are largely lacking. Understanding the connection between malware and the...

CVE-2025-60514: Improper Neutralization of Special Elements used in an SQL Command

Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts...

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

Malicious Package

Overview common-logify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-61951

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/...

EUVD-2025-34662

Malicious code in batchw-test-common-config npm...

Malicious Package

Overview batchw-test-common-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2025-9124

A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault...

ai.catboost:catboost-spark_3.5_2.12 (>=1.2.3, <=1.2.10), ai.djl.spark:spark_2.12 (0.29.0) +294 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (>=3.5.0, <=3.5.1)

org.apache.spark:spark-network-common2.12 MAVEN version =3.5.0, =1.2.3, =3.44.0.1-1-3.5, =0.1.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.6.17, =0.0.3, =14.0.0, =14.0.0, =14.0.0, =14.17.3 and more Source cves: CVE-2025-55039 Source advisory: GHSA-6P6V-M64V-JX8Q...

ai.salmonbrain:ruleofthumb_2.4.3_2.12 (0.0.3), ai.tripl:arc-deltalake-pipeline-plugin_2.12 (>=1.0.0, <=1.1.0) +93 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (2.4.3)

org.apache.spark:spark-network-common2.12 MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-network-common2.12 and may be impacted: - ai.salmonbrain:ruleofthumb2.4.32.12 0.0.3 -...

ai.catboost:catboost-spark_3.5_2.12 (>=1.2.3, <=1.2.10), ai.djl.spark:spark_2.12 (0.29.0) +294 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (>=3.5.0, <=3.5.1)

org.apache.spark:spark-network-common2.12 MAVEN version =3.5.0, =1.2.3, =3.44.0.1-1-3.5, =0.1.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.6.17, =0.0.3, =14.0.0, =14.0.0, =14.0.0, =14.17.3 and more Source cves: CVE-2025-55039 Source advisory: OSV:GHSA-6P6V-M64V-JX8Q...

ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3), ai.whylabs:whylogs-java-spark_2.4.7-scala_2.12 (0.1.2-b6) +61 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (2.4.7)

org.apache.spark:spark-network-common2.12 MAVEN version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-network-common2.12 and may be impacted: - ai.catboost:catboost-spark2.12 =0.25-rc1, =1.0.7, =2.4.70.18.1-beta3, =0.13.6...

ai.tripl:arc-cassandra-pipeline-plugin_2.12 (>=1.2.0, <=1.3.0), ai.tripl:arc-dataquality-udf-plugin_2.12 (>=1.2.0, <=1.3.0) +134 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.12 (2.4.5)

org.apache.spark:spark-network-common2.12 MAVEN version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-network-common2.12 and may be impacted: - ai.tripl:arc-cassandra-pipeline-plugin2.12 =1.2.0, =1.2.0, =1.6.0, =1.1.0,...

ai.catboost:catboost-spark_3.5_2.13 (>=1.2.3, <=1.2.10), ai.telemetria:optima-spark-common_2.13 (>=0.1.0, <=0.1.2) +157 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.13 (>=3.5.0, <=3.5.1)

org.apache.spark:spark-network-common2.13 MAVEN version =3.5.0, =1.2.3, =0.1.0, =4.43.0, =3.5.0, =3.5.00.20.1, =3.5.0, =2.0.4, =2.1.6-spark-3.5.1, =2.1.6-spark-3.5.1, =2.2.1-spark-3.5.1 and more Source cves: CVE-2025-55039 Source advisory: GHSA-6P6V-M64V-JX8Q...

DEBIAN-CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...