524 matches found
CVE-2025-65955 ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
EUVD-2025-199160
Malicious code in @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode npm...
Malicious code in @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6b81efa112c215fc1db9c23a7808a0d8613c693b7e60a8e988a360a5f1fb54 The package @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191045 Malicious code in @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6b81efa112c215fc1db9c23a7808a0d8613c693b7e60a8e988a360a5f1fb54 The package @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199024
Malicious code in tcsp-draw-test npm...
MAL-2025-191019 Malicious code in tcsp-draw-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3aab2e2be47f975ef5d6dcbb26dd22621b6043ca130bcd094aa6524696873a3 The package tcsp-draw-test was found to contain malicious code. Source: ghsa-malware a0c29ab38c3bc97e4948587b9e49496e015ba0ed1f2b292e49fad4a91b6380c2...
Malicious code in tcsp-draw-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3aab2e2be47f975ef5d6dcbb26dd22621b6043ca130bcd094aa6524696873a3 The package tcsp-draw-test was found to contain malicious code. Source: ghsa-malware a0c29ab38c3bc97e4948587b9e49496e015ba0ed1f2b292e49fad4a91b6380c2...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c029f895b6e2e59e54d01b72927b97daa87a560816829220a1b62775221ae The package @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198655
Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode npm...
EUVD-2025-198657
Malicious code in orbit-nebula-draw-tools npm...
MAL-2025-190698 Malicious code in orbit-nebula-draw-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d521db6f84340dc75631ec8c317db0054fa0b23e218d304ea901c1f239909 The package orbit-nebula-draw-tools was found to contain malicious code. Source: ghsa-malware...
Malicious code in orbit-nebula-draw-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d521db6f84340dc75631ec8c317db0054fa0b23e218d304ea901c1f239909 The package orbit-nebula-draw-tools was found to contain malicious code. Source: ghsa-malware...
TencentOS Server 3: firefox (TSSA-2023:0261)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0261 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
JLSEC-2025-126 FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the...
FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the drawblockrectangle function of libavfilter/vfcodecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS via crafted input...
CVE-2025-61859
An out-of-bounds write vulnerability exists in VS6ComFile!CItemDraw::ismotiontween of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...
EUVD-2018-15645
Malware in sbrugna...
EUVD-2012-2919
Malware in sbrugna...