588 matches found
CVE-2025-66453 Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function
Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...
CVE-2025-66453
CVE-2025-66453 — Rhino (JavaScript engine) : Multiple IBM/IBM-linked advisories confirm Rhino, used in products such as MongoDB Enterprise Advanced (IBM), FileNet Content Manager, IBM Maximo MAS, and IBM webMethods BPM, is affected. Prior to Rhino versions 1.8.1, 1.7.15.1, and 1.7.14.1, passing a...
PT-2025-48990
Name of the Vulnerable Software and Affected Versions Rhino versions prior to 1.8.1 Rhino versions prior to 1.7.15.1 Rhino versions prior to 1.7.14.1 Description Rhino is a JavaScript implementation written in Java. Prior to versions 1.8.1, 1.7.15.1, and 1.7.14.1, providing a crafted floating-poi...
EUVD-2025-180488
Malicious code in air-easy-dog-float-interface npm...
EUVD-2025-176390
Malicious code in sigma-byte-minify-cache-float npm...
EUVD-2025-180189
Malicious code in await-float-optimize-route-omicron npm...
EUVD-2025-178880
Malicious code in float-rain-finally-yaml-air npm...
EUVD-2025-178447
Malicious code in import-float-omega-user-eta npm...
EUVD-2025-179026
Malicious code in eta-refactor-execute-float-load npm...
EUVD-2025-178513
Malicious code in hot-awk-authorize-float-interface npm...
EUVD-2025-176753
Malicious code in refactor-signal-float-code-char npm...
EUVD-2025-176420
Malicious code in serialize-short-grep-async-float npm...
MAL-2025-189122 Malicious code in refactor-signal-float-code-char (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bd76bf641eda520b1b2a0dbe0a1b53f6b4fc54d58d3d0fd0530f99af1f492b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176595
Malicious code in root-rain-catch-sigma-float npm...
EUVD-2025-178883
Malicious code in float-beta-deploy-star-meta npm...
EUVD-2025-178085
Malicious code in link-theta-float-class-balance npm...
EUVD-2025-177625
Malicious code in new-mu-sigma-float-visualize npm...
EUVD-2025-178881
Malicious code in float-new-route-benchmark-async npm...