7127 matches found
EUVD-2025-175675
Malicious code in vuetify-thermochronology-csv-cryovolcano npm...
EUVD-2025-175558
Malicious code in whitedwarf-inquirer-csv-blitz npm...
EUVD-2025-175503
Malicious code in xenon-prettier-plugin-markdown-csv-barnard npm...
EUVD-2025-176557
Malicious code in sagitta-protractor-taurus-csv npm...
EUVD-2025-177899
Malicious code in mensa-subscription-antares-csv npm...
EUVD-2025-178169
Malicious code in kuiperbelt-taurus-csv-ceres npm...
EUVD-2025-179455
Malicious code in csv-aldebaran-biohacking-cluster npm...
EUVD-2025-179452
Malicious code in csv-helmet-dione-canopus npm...
EUVD-2025-179449
Malicious code in csv-puppeteer-phoenix-event npm...
EUVD-2025-179448
Malicious code in csv-steganography-sadr-buffer npm...
EUVD-2025-179810
Malicious code in ceres-perseus-csv-nconf npm...
EUVD-2025-179453
Malicious code in csv-envconfig-achernar-stratigraphy npm...
EUVD-2025-179454
Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...
Malicious code in typeorm-csv-troposphere-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73547aa88679589280af7f97832cc643441c415a7b0c69aa00448db76023b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179450
Malicious code in csv-mongodb-rehype-less-loader npm...
EUVD-2025-176269
Malicious code in spectron-csv-dynamo-bunyan npm...
CVE-2025-64406
Apache OpenOffice versions through 4.1.15 are susceptible to an out-of-bounds Write vulnerability (CWE-787). This flaw allows a remote attacker to craft a malicious document that can cause the program to crash or lead to the corruption of other memory areas. One report specifically identifies a p...
CVE-2025-64406 Apache OpenOffice: Possible memory corruption during CSV import
An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the...
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...