2050 matches found
PT-2025-6925
Name of the Vulnerable Software and Affected Versions Juniper Networks Session Smart Router versions 5.6.7 through 5.6.16 Juniper Networks Session Smart Router versions 6.0.8 Juniper Networks Session Smart Router versions 6.1 through 6.1.11-lts Juniper Networks Session Smart Router versions 6.2...
MAL-2025-1247 Malicious code in ing-feat-oct-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7aba65afd05c2120b6f0e2c022b860bf8f5dbe756920055d1726f3f0ace973a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-34663
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969...
MAL-2025-1121 Malicious code in facebook-pixel-wordpress-js-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3d88b8d260c2076030d62c623d5ba25ef3707962091c0e2a0c124f2610fd37d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1077 Malicious code in com.unity.services.core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570e09325b7eeead7439db1cd6a223b5de2ddab48982af7bb43957a6c48d9069 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1097 Malicious code in cscropper-vue3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03314c2593e63f6f953b281505c7a63eaa4fe7c3ffd71eb8fd8c28d5c1c16fd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-7695 Out-of-bounds Write Vulnerability
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service atta...
PT-2025-5043 · Quote · Quote
Name of the Vulnerable Software and Affected Versions: Quote me versions 1.0 and below Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables attackers to inject malicious...
CVE-2025-21566
...
CVE-2025-21563
CVE-2025-21563 affects Oracle PeopleSoft, Run Control Management in the CC Common Application Objects component (PeopleSoft 9.2). The issue allows a low-privilege attacker with network access over HTTP to perform unauthorized updates, inserts, or deletes on affected data. Root cause details are n...
CVE-2025-21547
Oracle Hospitality OPERA 5 vulnerability CVE-2025-21547 affects Opera Servlet in Oracle Hospitality OPERA 5, versions 5.6.19.20, 5.6.25.8, 5.6.26.6, and 5.6.27.1. An unauthenticated attacker with network access via HTTP can compromise OPERA 5, potentially gaining unauthorized access to all data o...
CVE-2025-21533
...
CVE-2025-21524
...
CVE-2025-21510
CVE-2025-21510 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to 9.2.9.0. An unauthenticated, network-accessible (HTTP) attacker can compromise data or gain full access to Tools. Fixed in 9.2.9.x line; NCSC notes 9.2.9.2; Oracle CPU Jan 2025 advisory references patches. Exp...
CVE-2025-21501
CVE-2025-21501 is a vulnerability in Oracle MySQL’s Server: Optimizer component affecting MySQL Server versions 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The issue allows low-privilege, network-access attackers to cause a hang or frequent crash (availability impact: high), i.e...
CVE-2025-21497
...
CVE-2025-21494
...
MAL-2025-270 Malicious code in aem-spa-component-mapping (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b1b3d4405a0ea27ac00cb9f96e4e70aa642f96018fa9b52508da4e98f1a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-199 Malicious code in kubeflow-pipelines (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
