MAL-2025-24096 Malicious code in jupiter-asthenosphere-loop-janus (npm)

The package jupiter-asthenosphere-loop-janus was found to contain malicious code...

MAL-2025-24105 Malicious code in jupiter-ugli-rmwp (npm)

The package jupiter-ugli-rmwp was found to contain malicious code...

MAL-2025-24098 Malicious code in jupiter-deneb-galaxy-greatfilter (npm)

The package jupiter-deneb-galaxy-greatfilter was found to contain malicious code...

MAL-2025-32153 Malicious code in rest-cosmos-convict-jupiter (npm)

The package rest-cosmos-convict-jupiter was found to contain malicious code...

MAL-2025-24102 Malicious code in jupiter-pine-7smw (npm)

The package jupiter-pine-7smw was found to contain malicious code...

MAL-2025-24097 Malicious code in jupiter-charlie-dzri (npm)

The package jupiter-charlie-dzri was found to contain malicious code...

MAL-2025-14022 Malicious code in acorn-jupiter-0uhr (npm)

The package acorn-jupiter-0uhr was found to contain malicious code...

MAL-2025-39023 Malicious code in webpack-jupiter-nova-graphql (npm)

The package webpack-jupiter-nova-graphql was found to contain malicious code...

MAL-2025-19011 Malicious code in dwarf-jupiter-e8xo (npm)

The package dwarf-jupiter-e8xo was found to contain malicious code...

MAL-2025-26868 Malicious code in mui-jupiter-mdx-supercluster (npm)

The package mui-jupiter-mdx-supercluster was found to contain malicious code...

MAL-2025-24104 Malicious code in jupiter-teak-lsdh (npm)

The package jupiter-teak-lsdh was found to contain malicious code...

MAL-2025-24099 Malicious code in jupiter-javascript-corvus-dendrochronology (npm)

The package jupiter-javascript-corvus-dendrochronology was found to contain malicious code...

CVE-2025-0365

The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server,...

CVE-2024-12033

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the synclibraries function in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to sync libraries...

CVE-2024-12316

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportpopupaction function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to export popup templates...

CVE-2023-3813

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6. This makes it possible for unauthenticated attackers to download the contents of arbitrary files on the server, which can contain sensitive information. The requires the...

CVE-2023-48887

A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...

CVE-2022-1658

Vulnerable versions of the Jupiter Theme = 6.10.1 allow arbitrary plugin deletion by any authenticated user, including users with the subscriber role, via the abbremoveplugin AJAX action registered in the framework/admin/control-panel/logic/plugin-management.php file. Using this functionality, an...

CVE-2020-6374

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation.jt file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper...

CVE-2006-2105

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 null character in the n parameter...