GitLab EE Access Control Unauthorized Access

The vulnerability of the application software interface of the Git-based software platform for collaborative code development on GitLab EE is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to agents fr...

Linux p9_read_work Heap Buffer Overflow DoS

The vulnerability of the p9readwork function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux driver uio_hvgeneric Heap Buffer Overflow DoS

The vulnerability of the drivers/uio/uiohvgeneric.c module in Linux kernels is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-61959

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

CVE-2025-12516

Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12515

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

EUVD-2025-37017

Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12516

BLU-IC2 and BLU-IC4 networked controllers (Azure Access Technology) are affected by a lack of graceful error handling, which can cause HTTP 5xx errors. Affected through 1.19.5. CVSS indicates CRITICAL impact on confidentiality, integrity, and availability. Exploitation status is not stated in the...

EUVD-2025-37018

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

EUVD-2025-36740

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

PT-2025-44416

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The software exhibits a lack of graceful error handling, resulting in HTTP 5xx errors. Recommendations For BLU-IC2 versions through 1.19.5, implement robust error...

Linux Heap Buffer Overflow DoS

The vulnerability of the netfsallocrequest function in the Linux operating system is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the afsputserver function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures...

MAL-2025-49006 Malicious code in flowtype-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07ca4fe58cef63ee7b190dec7cc8a83378ede2699170492a685e3e2c70d137d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36813

Malicious code in flowtype-errors npm...

Malicious code in flowtype-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07ca4fe58cef63ee7b190dec7cc8a83378ede2699170492a685e3e2c70d137d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview flowtype-errors is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in flowtype-errors

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-61959

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...

CVE-2025-61959

Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...