8771 matches found
MAL-2025-3594 Malicious code in ui-platform-base-components-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b86eb50d9103e65b5af0d24fc0da1302ab769b008a7a2d7c46d686a0fca6d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ui-platform-base-components-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b86eb50d9103e65b5af0d24fc0da1302ab769b008a7a2d7c46d686a0fca6d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ai.ylyue:yue-library-data-es (>=j11.2.6.0 <=j11.2.6.2), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0 <=6.10.5) +517 more potentially affected by CVE-2024-52979 via org.elasticsearch.plugin:lang-mustache-client (>=7.0.0-alpha1 <=7.17.24)
org.elasticsearch.plugin:lang-mustache-client MAVEN version =7.0.0-alpha1, =j11.2.6.0, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.10.0, =6.10.0, =6.10.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.6.5, =5.7.9 and more Source cves: CVE-2024-52979 Source advisory:...
Malicious code in easyship-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb88996af76273910ad50c925b80398cf3500db0b334d4785f6d3d3f415a3b51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3550 Malicious code in easyship-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb88996af76273910ad50c925b80398cf3500db0b334d4785f6d3d3f415a3b51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.
The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the stihqvdpatomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
CVE-2025-4035
A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...
UBUNTU-CVE-2025-4035
A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...
Authentication Bypass
OctoPrint is vulnerable to Authentication Bypass. The vulnerability is due to insufficient authentication checks allowing direct access to rendered HTML of certain frontend pages. Attackers can exploit this to potentially access sensitive UI components...
MAL-2025-3425 Malicious code in va-report-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in va-report-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fcw-dashboard-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3398 Malicious code in fcw-dashboard-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3372 Malicious code in @sporta-technology/rn-components.appbar (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/rn-components.appbar (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.typography (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3369 Malicious code in @sporta-technology/d11-web-components.typography (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.tooltip (npm)
--- -= Per source details. Do not edit below this line.=-...