Malicious code in @zalastax/nolb-es (npm)

The package @zalastax/nolb-es was found to contain malicious code...

Malicious code in es-data-table (npm)

The package es-data-table was found to contain malicious code...

MAL-2025-11287 Malicious code in @zalastax/nolb-es (npm)

The package @zalastax/nolb-es was found to contain malicious code...

Malicious code in eslint-plugin-es-spec (npm)

The package eslint-plugin-es-spec was found to contain malicious code...

MAL-2025-19853 Malicious code in eslint-plugin-es-spec (npm)

The package eslint-plugin-es-spec was found to contain malicious code...

MAL-2025-19810 Malicious code in es-data-table (npm)

The package es-data-table was found to contain malicious code...

PT-2025-32657 · Siemens · Simatic S7-Plcsim +11

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-PLCSIM versions affected versions not specified SIMATIC STEP 7 versions affected versions not specified SIMATIC WinCC versions affected versions not specified SIMOCODE ES versions affected versions not specified SIMOTION SCOUT TIA...

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and others are products of Siemens, a German company. siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers. siemens SIMATIC PCS neo is a distributed control system. siemens SIMATIC STEP 7 is a PLC program simulation...

PT-2025-32646 · Siemens · Simatic S7-Plcsim +10

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 through 6.0 SIMATIC S7-PLCSIM version 17 SIMATIC STEP 7 versions 17 through 20 SIMATIC WinCC versions 17 through 20 SIMOCODE ES versions 17 through 20 SIMOTION SCOUT TIA versions 5.4 through 5.7 SINAMICS Startdriv...

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and Siemens SIMATIC S7-PLCSIM V17 are both products of Siemens, Germany.Siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers.Siemens SIMATIC S7-PLCSIM V17 is a PLC program simulation software. PLCSIM V17 is a PLC program...

CVE-2025-38455

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV-ES intra host migration if vCPU creation is in-flight Reject migration of SEV-ES state if either the source or destination VM is actively creating a vCPU, i.e. if kvmvmioctlcreatevcpu is in the section betwee...

CVE-2025-38455

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV-ES intra host migration if vCPU creation is in-flight Reject migration of SEV-ES state if either the source or destination VM is actively creating a vCPU, i.e. if kvmvmioctlcreatevcpu is in the section betwee...

CVE-2025-38455 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV-ES intra host migration if vCPU creation is in-flight Reject migration of SEV-ES state if either the source or destination VM is actively creating a vCPU, i.e. if kvmvmioctlcreatevcpu is in the section betwee...

CVE-2025-38455 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV-ES intra host migration if vCPU creation is in-flight Reject migration of SEV-ES state if either the source or destination VM is actively creating a vCPU, i.e. if kvmvmioctlcreatevcpu is in the section betwee...

CVE-2025-38455

CVE-2025-38455: Linux kernel KVM-SEV-ES intra-host migration is rejected when vCPU creation is in-flight to prevent SEV-ES VM with non-SEV-ES vCPU. Root cause: vCPU creation runs largely outside kvm->lock, allowing sev_info.es_active to toggle during svm_vcpu_create(), causing issues when free...

Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4938 Malicious code in husky-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7389701dece7abfcef40d0bfff8c26f78ce0a68100f40bff5e834bf57d6e637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-32735

A vulnerability has been identified in SIMATIC STEP 7 Safety V16 All versions V16 Update 7, SIMATIC STEP 7 Safety V17 All versions V17 Update 7, SIMATIC STEP 7 Safety V18 All versions V18 Update 2, SIMATIC STEP 7 V16 All versions V16 Update 7, SIMATIC STEP 7 V17 All versions V17 Update 7, SIMATIC...

CVE-2023-4259

Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code...

CVE-2023-5414

The Icegram Express plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.6.23 via the showeslogs function. This allows administrator-level attackers to read the contents of arbitrary files on the server, which can contain sensitive information including...