30 matches found
Malicious code in doca-cf-theme (npm)
The package doca-cf-theme was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-doca (npm)
The package @zalastax/nolb-doca was found to contain malicious code. --- Credit: OpenSSF source...
@addaps/doca-addaps-theme (>=1.0.1, <=1.0.6), doca-bootstrap-theme (>=0.0.6, <=1.0.0) +11 more potentially affected by unknown CVE via react-marked-markdown (1.4.6)
react-marked-markdown NPM version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on react-marked-markdown and may be impacted: - @addaps/doca-addaps-theme =1.0.1, =0.0.6, =0.0.1, =0.2.1, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.15.1, =0.1.2, =0.2.1 Sourc...
CVE-2025-23258
NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2025-23263
NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN...
CVE-2025-23257
NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
EUVD-2025-26733
Malicious code in bioql PyPI...
EUVD-2025-21786
Malicious code in bioql PyPI...
VGT+ Component Privilege Escalation
The vulnerability of the VGT+ component in Mellanox OFED and NVIDIA DOCA-Host packages is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service failures...
Unspecified Vulnerability in NVIDIA DOCA (CNVD-2025-21180)
NVIDIA DOCA is a software framework from NVIDIA. NVIDIA DOCA has a security vulnerability that can be exploited by attackers to cause elevation of privilege...
CVE-2025-23258
NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2025-23257
NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2025-23258
NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2025-23258
CVE-2025-23258 affects NVIDIA DOCA, specifically the collectx-dpeserver Debian package for arm64. The vulnerability could allow a low-privilege local attacker to escalate privileges. NVIDIA’s accompanying bulletin indicates a fix is available in DOCA updates (e.g., DOCA 3.0.0 for the collectx-dpe...
CVE-2025-23257
NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2025-23257
NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2025-23258: Incorrect Permission Assignment for Critical Resource
NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
NVIDIA DOCA security vulnerabilities
NVIDIA DOCA is a software framework from NVIDIA. NVIDIA DOCA has a security vulnerability that can be exploited by attackers to cause elevation of privilege...
CVE-2025-23257: Incorrect Permission Assignment for Critical Resource
NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges...
