3307 matches found
CVE-2025-64765 Astro middleware authentication checks based on url.pathname can be bypassed via url encoded values
Astro is a web framework. Prior to version 5.15.8, a mismatch exists between how Astro normalizes request paths for routing/rendering and how the application’s middleware reads the path for validation checks. Astro internally applies decodeURI to determine which route to render, while the...
Mozilla Thunderbird < 52.1
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-13 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex...
SUSE-SU-2025:4111-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857. ...
OSV-2025-900 Heap-buffer-overflow in DecodeFrame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=460575093 Crash type: Heap-buffer-overflow READ Crash state: DecodeFrame testdecoderprocess EsOutSend...
Malicious code in quick-decode-transpile-array-wind (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be1eb5319667c7103faae653520c2ac40f78ca9957e497f34f7395845b3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180520
Malicious code in abstract-mu-kappa-authenticate-decode npm...
EUVD-2025-177475
Malicious code in old-import-decode-table-process npm...
EUVD-2025-176832
Malicious code in quick-decode-transpile-array-wind npm...
EUVD-2025-177886
Malicious code in meta-boolean-analyze-decode-cloud npm...
EUVD-2025-179251
Malicious code in double-decode-encrypt-cache-bundle npm...
EUVD-2025-175752
Malicious code in user-boolean-info-decode-try npm...
EUVD-2025-176946
Malicious code in proxy-rain-decode-xi-error npm...
EUVD-2025-179688
Malicious code in code-interpret-finally-decode-cold npm...
EUVD-2025-177751
Malicious code in mu-dog-proxy-decode-unix npm...
EUVD-2025-179381
Malicious code in decode-info-new-finally-new npm...
EUVD-2025-180123
Malicious code in bash-serialize-decode-grid-sudo npm...
EUVD-2025-178288
Malicious code in java-socket-cluster-decode-catch npm...
EUVD-2025-176082
Malicious code in table-old-sun-await-decode npm...
MAL-2025-190090 Malicious code in upsilon-decode-catch-log-function (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0f728a55c388778d0b6ad28ccfe8a52b73fe5f721ab54b852d2982c0211dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...