Lucene search
+L

16840 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/28 4:13 p.m.6 views

Malicious code in dynamic-importer2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4468869b1899f5d6f33a0bb39a221a394f0d1fcce1dc46f3f2127636a40b500b Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2025/06/28 4:13 p.m.4 views

MAL-2025-5395 Malicious code in dynamic-importer2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4468869b1899f5d6f33a0bb39a221a394f0d1fcce1dc46f3f2127636a40b500b Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
NVD
NVD
added 2025/06/28 1:15 p.m.13 views

CVE-2025-1991

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

7.5CVSS0.00376EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/28 1:15 p.m.21 views

CVE-2025-1991

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/28 1:02 p.m.30 views

CVE-2025-1991 IBM Informix Dynamic Server denial of service

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

7.5CVSS0.00376EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/28 1:02 p.m.51 views

CVE-2025-1991

CVE-2025-1991 affects IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0. The vulnerability is a denial of service caused by an integer underflow during packet processing. IBM’s advisory (ID 7238455) lists fixed releases: 12.10.xC16W2 for 12.10 and 14.10.xC11W2 for 14.10; 15.0 is also li...

7.5CVSS6.5AI score0.00376EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/28 1:02 p.m.9 views

CVE-2025-1991 IBM Informix Dynamic Server denial of service

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

7.5CVSS6.3AI score0.00376EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/28 12:00 a.m.9 views

PT-2025-27305 · Ibm · Ibm Informix Dynamic Server

Name of the Vulnerable Software and Affected Versions: IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0 Description: The issue allows a remote attacker to cause a denial of service due to an integer underflow when processing packets. Recommendations: For IBM Informix Dynamic Server...

7.5CVSS7.1AI score0.00376EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/06/28 12:00 a.m.10 views

IBM Informix Dynamic Server 数字错误漏洞

IBM Informix Dynamic Server IDS is a scalable object-relational database server from International Business Machines IBM that provides continuous data availability and disaster recovery, among other features, for clustered data centers. A numeric error vulnerability exists in IBM Informix Dynamic...

7.5CVSS6.3AI score0.00376EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/06/26 11:21 p.m.7 views

SUSE CVE-2025-52889

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus version 6.12 and 6.13 generates nftables rules for local services DHCP, DNS... that partially bypass security options security.macfiltering, security.ipv4filtering and...

3.4CVSS6.6AI score0.00204EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/06/26 9:11 p.m.3 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the improper enforcement of resource limits in the nftables rules generation process for managed bridge networks. An attacker can exhaust the DHCP pool and disrupt network...

4.8CVSS7AI score0.00204EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/25 5:15 p.m.9 views

UBUNTU-CVE-2025-52889

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus version 6.12 and 6.13 generates nftables rules for local services DHCP, DNS... that partially bypass security options security.macfiltering, security.ipv4filtering and...

3.4CVSS6AI score0.00204EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:00 a.m.13 views

The vulnerability of the bpf_jit_build_prologue() function in the arch/powerpc/net/bpf_jit_comp32.c network support module on the PowerPC platform of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfjitbuildprologue function in the arch/powerpc/net/bpfjitcomp32.c file, a network support module for the PowerPC platform of the Linux operating system, relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the...

7.8CVSS7.5AI score0.00228EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:00 a.m.11 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.6AI score0.00206EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/06/24 3:43 p.m.13 views

CLSA-2025-1750692029 glibc: Fix of CVE-2025-4802

CVE-2025-4802: fix untrusted LDLIBRARYPATH vulnerability in dynamically shared library loading in setuid binaries to prevent attacker control...

7.8CVSS7.1AI score0.00557EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
added 2025/06/24 12:00 a.m.27 views

Diffusion-Based Task-Oriented Semantic Communications with Model Inversion Attack

Semantic communication has emerged as a promising neural network-based system design for 6G networks. Task-oriented semantic communication is a novel paradigm whose core goal is to efficiently complete specific tasks by transmitting semantic information, optimizing communication efficiency and ta...

6.6AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/24 12:00 a.m.10 views

ZK-SERIES: Privacy-Preserving Authentication Using Temporal Biometric Data

Biometric authentication relies on physiological or behavioral traits that are inherent to a user, making them difficult to lose, forge or forget. Biometric data with a temporal component enable the following authentication protocol: recent readings of the underlying biometrics are encoded as tim...

6.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/24 12:00 a.m.7 views

Evaluating Disassembly Errors with Only Binaries

Disassemblers are crucial in the analysis and modification of binaries. Existing works showing disassembler errors largely rely on practical implementation without specific guarantees and assume source code and compiler toolchains to evaluate ground truth. However, the assumption of source code i...

7.2AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/06/23 11:21 p.m.7 views

SUSE CVE-2025-4563

A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly validates resource claim statuses during pod status updates but fails to...

2.7CVSS7AI score0.00663EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/06/23 6:30 p.m.4 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the NodeRestriction admission controller process. An attacker can access unauthorized dynamic resources by creating mirror pods during pod creation when the DynamicResourceAllocation feature gate is enabled...

5.1CVSS6.9AI score0.00663EPSS
SaveExploits0References2
Rows per page
Query Builder