752 matches found
Malicious code in typescript-5.4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ebff3cac791b9745fe1807a98ab1bf33dcd334bba210634fd691d4451d50f179 The OpenSSF Package Analysis project identified 'typescript-5.4' @...
Linux Distros Unpatched Vulnerability : CVE-2020-25412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution. CVE-2020-25412 Note that Nessus reli...
VulnCheck KEV: CVE-2023-45038
An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later...
CVE-2025-54220
InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2025-33391 · Posimyth · Nexter Blocks
Name of the Vulnerable Software and Affected Versions: Nexter Blocks versions through 4.5.4 Description: Missing authorization exists in POSIMYTH Nexter Blocks due to incorrectly configured access control security levels. Recommendations: At the moment, there is no information about a newer versi...
CVE-2025-54221
InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54219
InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54221 InCopy | Out-of-bounds Write (CWE-787)
InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54214
Adobe InDesign Desktop is affected by an out-of-bounds read (CVE-2025-54214) in versions 20.4, 19.5.4 and earlier, which could disclose memory contents. Exploitation requires user interaction (open a malicious file). Connected sources confirm the issue and note that updates address the vulnerabil...
CVE-2025-54224 InDesign Desktop | Use After Free (CWE-416)
InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54209
Adobe InDesign Desktop is affected by a Heap-based Buffer Overflow (CVE-2025-54209) that could allow arbitrary code execution in the context of the current user. Affected versions: 20.4, 19.5.4 and earlier. Exploitation requires user interaction (opening a malicious file). Documented impact: arbi...
CVE-2025-54227 InDesign Desktop | Out-of-bounds Read (CWE-125)
InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54228 InDesign Desktop | Out-of-bounds Read (CWE-125)
InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2025-32929 · Adobe · Indesign Desktop 19.5.4 +1
Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 are affected by a heap-based buffer overflow that may lead to arbitrary code execution with...
PT-2025-32944 · Adobe · Indesign Desktop
Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by an out-of-bounds read issue that may lead to sensitive memory disclosure. Exploitation of this issue requir...
PT-2025-32938 · Adobe · Incopy 20.4 +1
Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 Description: InCopy versions 20.4 and earlier, including version 19.5.4, are susceptible to an out-of-bounds write issue. Successful exploitation of this issue could lead to arbitrary cod...
PT-2025-32937 · Adobe · Incopy 20.4 +1
Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 Description: InCopy versions 20.4, 19.5.4, and earlier are affected by a heap-based buffer overflow that could result in arbitrary code execution in the context of the current user...
PT-2025-32940 · Adobe · Indesign Desktop
Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are susceptible to a Use After Free issue, potentially leading to arbitrary code execution with current user privileges...
PT-2025-32926 · Adobe · Indesign Desktop
Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by a Heap-based Buffer Overflow that may lead to arbitrary code execution within the current user's context...
