10580 matches found
MAL-2025-164 Malicious code in babel-plugin-styled-componentsss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5912584dcf93c8e94155d4393fdc3cd508541ab1c09a39e8ac2d4c2d93667f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
TYPO3 security vulnerabilities
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 that stems from the vulnerability of the back-end user interface deep-linking functionality to a cross-site request forgery attack, which allows a...
SUSE CVE-2024-56372
In the Linux kernel, the following vulnerability has been resolved: net: tun: fix tunnapiallocfrags syzbot reported the following crash 1 Issue came with the blamed commit. Instead of going through all the iov components, we keep using the first one and end up with a malformed skb. 1 kernel BUG a...
CVE-2025-22152 Improper Path Validation Enables Path Traversal in Multiple Components in Atheos
Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execute arbitrary files on the server. These vulnerabilities can be exploited through various attack...
Rockwell Automation Arena Code Execution
The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in its dependence on external components. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Malicious code in safe-react-components (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb053fb51230ded6b594cc92293d5377c31b4b9fd8d47e14e46d824d7e672910 Any computer that has this package install...
MAL-2025-4 Malicious code in safe-react-components (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb053fb51230ded6b594cc92293d5377c31b4b9fd8d47e14e46d824d7e672910 Any computer that has this package install...
Navigation components Microsoft Edge Google Chrome Bypass Security Restrictions
The vulnerability of the Navigation components in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...
Linux kernel io_uring/rsrc DoS
The vulnerability of the iouring/rsrc components in the Linux operating system’s kernel is related to improper blocking in the iorsrcrefquiesce function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle Java SE Unauthorized Access
The vulnerability of Oracle Java SE’s software platform’s components is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Linux Privilege Escalation
The vulnerability of components like drivers/virt/acrn in the Linux operating system is related to errors that occur after the release of functions acrnvmmemsegunmap and acrnvmRamMap. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
CVE-2019-2483
The CVE-2019-2483 issue affects Oracle iStore Shopping Cart in Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise iStore, requiring user interaction, and can lead to unauth...
DLA-4002-1 intel-microcode - security update
Bulletin has no description...
MAL-2024-12094 Malicious code in ui-forms-embed-components-reporting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...
Malicious code in ui-forms-embed-components-reporting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...
MAL-2024-12092 Malicious code in parliament-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83403e5a067a527fcc2b02f581d2e85cf4f87645402589b407e06ad3f52c100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-6GF7-WV3F-9F5X
Bulletin has no description...
Malicious code in ecpfs-react-data-driven-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8380a709c782f2024d272f1ff935fda6cc8d7258a5c46da5d6e86997cc1ccee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ecpfs-react-data-driven-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Ubuntu: Security Advisory (USN-7166-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...