18115 matches found
IBM DB2 Query Handler DoS
The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...
IBM DB2 Query Handler DoS
The vulnerability of the Query Handler component of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using ...
Ivanti Connect Secure IPSec DoS
The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Ivanti Connect Secure Buffer Overflow DoS
The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
IBM App Connect Enterprise File Write
The vulnerability of the bar files in the control panel of the IBM App Connect Enterprise software relates to incorrect path name restrictions for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write any files into the file system remotely...
Ivanti Connect Secure Policy Secure DoS
The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2025-27370
OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...
CVE-2025-27370
OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the privatekeyjwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issu...
MAL-2025-1900 Malicious code in meta-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in meta-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1859 Malicious code in instacart-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in godaddy-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1814 Malicious code in godaddy-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1800 Malicious code in epicagames-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in epicagames-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1708 Malicious code in airbnb-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in airbnb-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ct-connect-stripe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e3e59596a1bfed6dbb57c4cdf6b56d77ef26faa5eeb31708ca799ec3cfb7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ct-connect-stripe
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-2036 Malicious code in ct-connect-stripe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e3e59596a1bfed6dbb57c4cdf6b56d77ef26faa5eeb31708ca799ec3cfb7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...