24488 matches found
MAL-2025-188961 Malicious code in publish-webdriverio-event-capella (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13ec41d982e5391f4a58b51051dc7c843a88857fae8f519de3e3ae4dcd6f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186876 Malicious code in event-husky-tachyon-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d6d40bbd46796ffe0433b9e3e0fd88b76fb46ceb7a4973ff526bea29bf1b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-31645
Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege...
EUVD-2025-150387
In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...
CVE-2025-40207
creationtimestamp| type| source ---|---|--- 2025-11-13 00:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5huwca35x2a 2025-12-23 14:57:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3manz3ha3ok2r 2026-04-02 17:00:00+00:00| seen|...
CVE-2025-40198
creationtimestamp| type| source ---|---|--- 2025-11-12 23:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5htsunc442x 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...
CVE-2021-4464
creationtimestamp| type| source ---|---|--- 2025-11-12 22:40:25+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hptlpwk742 2025-11-13 02:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i3w72lf72a...
CVE-2021-4463
creationtimestamp| type| source ---|---|--- 2025-11-12 22:40:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hpthcpoxh2 2025-11-13 01:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i2dygsf52s 2025-11-13 21:02:33+00:00| seen|...
EUVD-2025-136045
Malicious code in itale-dci-rfsrgget npm...
DEBIAN-CVE-2025-40187
In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...
UBUNTU-CVE-2025-40187
In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...
CVE-2025-40191
CVE-2025-40191 concerns the Linux kernel drm/amdkfd path. The provided sources state a fix for leaking the kfd process reference when unmapping userptr: calling kfd_lookup_process_by_pid as a function parameter can hold a reference and leak it, and can miss a NULL-pointer check if the application...
CVE-2025-40187 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...
EUVD-2025-124961
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
CVE-2025-11560
creationtimestamp| type| source ---|---|--- 2025-11-12 07:43:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5g5q4ja372j 2025-11-12 08:10:42+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5g77xflfhe2 2025-11-12 08:52:53+00:00| seen|...
EUVD-2025-124177
Malicious code in oberon-event-kaus-remark npm...
EUVD-2025-113668
Malicious code in fetch-event-cosmiconfig-chalk npm...