8754 matches found
CVE-2025-31972
CVE-2025-31972 affects HCL BigFix SM. It describes a sensitive information exposure due to internal connections not using TLS, allowing potential disclosure of data between internal components. CVSS 3.1 base score 6.5 (MEDIUM); attack vector adjacent, attack complexity low, privileges required no...
MAL-2025-41967 Malicious code in design-system-components-angular-workspace (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @rbapp/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41925 Malicious code in @rbapp/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41915 Malicious code in @rbacore/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbacore/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41543 Malicious code in com.db.internetportal.es.olb-crossover-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d663acd7f33114b8fd15402308edcdbf8546ceeaf53aec128737ac8b324f4ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in com.db.internetportal.es.olb-crossover-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d663acd7f33114b8fd15402308edcdbf8546ceeaf53aec128737ac8b324f4ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @sfdc-www-emu/clientlibs-web-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41457 Malicious code in @sfdc-www-emu/clientlibs-web-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Tenda AC10 安全漏洞
Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tenda Technology Co., Ltd, mainly for 200M and above fiber optic users. Tenda AC10 suffers from an improper access control vulnerability, which originates from improper access control of the /goform/ate endpoint, and c...
CVE-2025-57219
Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 allows attackers to escalate privileges or access sensitive components via a crafted request...
Malicious code in @flight-common/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...
MAL-2025-42122 Malicious code in @flight-common/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...
Security Bulletin: Multiple vulnerabilities in IBM Cognos Command Center
Summary There are vulnerabilities in IBM® Semeru Java™ used by IBM Cognos Command Center. Additionally, IBM Cognos Command Center is vulnerable to Open redirection, Clickjacking and Arbitary code execution vulnerabilities. This Security Bulletin relates only to the direct usage of third-party...
Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-49058 DESCRIPTION: In the Linux kernel, the following vulnerability has...
CVE-2025-43769
Stored cross-site scripting XSS vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute arbitrary web script or HTML via...
CVE-2025-55624
An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public components...