Linux Distros Unpatched Vulnerability : CVE-2018-6163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN...

Linux Distros Unpatched Vulnerability : CVE-2018-6100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofi...

Linux Distros Unpatched Vulnerability : CVE-2018-6172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN...

CVE-2025-34153

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

MAL-2025-33785 Malicious code in splunk_formatter (npm)

The package splunkformatter was found to contain malicious code...

Malicious code in json_log_formatter (npm)

The package jsonlogformatter was found to contain malicious code...

MAL-2025-23960 Malicious code in json_log_formatter (npm)

The package jsonlogformatter was found to contain malicious code...

CVE-2025-34153

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CVE-2025-34153 Hyland OnBase < 17.0.2.87 .NET Remoting TCP Channel Unauthenticated RCE

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CVE-2025-55010

Kanboard before 1.2.47 is affected by an unsafe deserialization in ProjectEventActvityFormatter that lets an admin modify event["data"] in project_activities to instantiate arbitrary PHP objects, enabling a gadget to write a web shell in /plugins and achieve remote code execution. The issue has b...

CVE-2025-55010 Kanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, an unsafe deserialization vulnerability in the ProjectEventActvityFormatter allows admin users the ability to instantiate arbitrary php objects by modifying the event"data" field in the...

Linux Distros Unpatched Vulnerability : CVE-2023-36675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter...

Linux Distros Unpatched Vulnerability : CVE-2020-35478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via...

CVE-2025-8263

A regular expression denial of service flaw has been discovered in the prettier code formatter tool. This flaw allows and attacker who has access to input source files to induce a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options do...

编号撤回

prettier is a code formatting tool from Prettier Open Source. This CVE number has been withdrawn...

DRUPAL-CONTRIB-2025-089

The File Download enables you to allow users to download file and image entities directly using a custom field formatter. It also provides an optional submodule to count and display file downloads in Views, similar to how the core statistics module tracks content views. The File Download module...

MAL-2025-5684 Malicious code in data-formatter-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0dd2a4d0c8101cf1e6761361aea7bc9afd9d28010878e44622da7af6fa3dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-formatter-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0dd2a4d0c8101cf1e6761361aea7bc9afd9d28010878e44622da7af6fa3dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in handlebars-formatter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92136f20fdccfde7498654c464b157e7c0c70bbbeabd511bcfb11e4d3f79a8dc Any computer that has this package installed or running should be considered...

MAL-2025-5308 Malicious code in handlebars-formatter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92136f20fdccfde7498654c464b157e7c0c70bbbeabd511bcfb11e4d3f79a8dc Any computer that has this package installed or running should be considered...