Malicious code in nova-state (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6850 Malicious code in nova-state (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6838 Malicious code in gik2 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in lynx-libs-mono (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7dcde725ba12b559bfd1e62b8d6058ced4b0a5ed11b9f168f8f6f576b42ef801 The OpenSSF Package Analysis project identified 'lynx-libs-mono' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

CVE-2025-41659

A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only unencrypted...

CVE-2025-27071

Memory corruption while processing specific files in Powerline Communication Firmware...

CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

Information disclosure while accessing and modifying the PIB file of a remote device via powerline...

CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

Information disclosure while accessing and modifying the PIB file of a remote device via powerline...

CVE-2025-47324

CVE-2025-47324 is linked to Qualcomm chipset firmware (notably Snapdragon QCA7005 family) and concerns information disclosure when accessing and modifying the PIB file over powerline. The connected documents provide limited technical detail beyond this behavior; no explicit root-cause or concrete...

CVE-2025-27071 Buffer Copy Without Checking Size of Input in Powerline Communication Firmware

Memory corruption while processing specific files in Powerline Communication Firmware...

CVE-2025-27071

CVE-2025-27071 is a memory corruption vulnerability affecting Powerline Communication Firmware (buffer copy without checking input size). The CVE entry (CVE-2025-27071) and related feeds describe memory corruption when processing specific files. The NVD entry lists a high-severity impact with CVS...

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

CVE-2025-54628

Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54628

Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54628

CVE-2025-54628 corresponds to a vulnerability described as incomplete verification information in the communication module, with potential impact to availability. Multiple sources (including Red Hat, NVD, CNVD/CNNVD, PT-2025-32070) reference Huawei HarmonyOS/EMUI and related communication compone...

CVE-2025-54628

Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

MAL-2025-6793 Malicious code in productboard-eslint-plugin-relay (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50a95e4b008863c195930bcd301dd1f243002839a301a5be5d0078cab7b22786 The OpenSSF Package Analysis project identified...

Linux Distros Unpatched Vulnerability : CVE-2024-7246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed...

Linux Distros Unpatched Vulnerability : CVE-2019-9799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent...