8640 matches found
MAL-2025-190669 Malicious code in @orbitgtbelgium/orbit-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c190facc026ad647e4bda5141049326833c8790e0dae8e48a651720f4fad0 The package @orbitgtbelgium/orbit-components was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198686
Malicious code in @asyncapi/generator-components npm...
Malicious code in @asyncapi/generator-components (npm)
@asyncapi/generator-components version 0.7.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is...
ALSA-2025:21936 Important: valkey security update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
Amazon Linux 2023 : lz4, lz4-devel, lz4-libs (ALAS2023-2025-1266)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1266 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks...
Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2025-2435)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
firefox: thunderbird: Mitigation bypass in the DOM: Core & HTML component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Core & HTML component...
CVE-2025-60796
phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting XSS vulnerabilities across various components. User-supplied input from $REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations including sequences.php, indexes.php, admin.ph...
egovframe-common-components 安全漏洞
egovframe-common-components is a collection of commonly used functions open-sourced by the e-Government Standard Framework Center. A security vulnerability exists in egovframe-common-components version 4.3.1 and earlier, which originates from an unauthenticated file upload endpoint and could lead...
egovframe-common-components 安全漏洞
egovframe-common-components is a collection of commonly used functions open-sourced by the e-Government Standard Framework Center. A security vulnerability exists in egovframe-common-components version 4.3.1 and earlier, which stems from a design flaw in symmetric encryption that could lead to an...
Microsoft Office Code Execution Vulnerability (CNVD-2026-00028)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...
media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
...
CVE-2025-20010
Use of unmaintained third party components for some IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation...
EulerOS 2.0 SP10 : icu (EulerOS-SA-2025-2416)
According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...
EUVD-2025-93532
Use of unmaintained third party components for some IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation...
CVE-2025-20010
Use of unmaintained third party components for some IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation...
CVE-2025-20010
Use of unmaintained third party components for some IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation...
CVE-2025-20010
CVE-2025-20010 affects Intel\u00ae Processor Identification Utility prior to version 8.0.43. The issue arises from use of unmaintained third-party components, enabling local privilege escalation by an authenticated user with low attack complexity. Reported impacts are high for confidentiality, in...
CVE-2025-20010
Use of unmaintained third party components for some IntelR Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation...