1823 matches found
MAL-2025-140995 Malicious code in commitlint-triton-less-loader-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144331 Malicious code in less-loader-sqlite-cressida-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144323 Malicious code in less-loader-karma-scorpius-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140157 Malicious code in buffer-gatsby-less-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17d501af7a70b3a645083209e4b5ddb87b03d3ea34e7427b64b6b2c2dc89b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147569 Malicious code in sadr-oauth-less-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd41cc24e26ec4db071c81f950a8b2f7fbb929edaceed842b3a51ef8fdfed23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144330 Malicious code in less-loader-sirius-perseus-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-13015
CVE-2025-13015 is a spoofing vulnerability in Firefox affecting Firefox < 145, Firefox ESR < 140.5, and Firefox ESR
PT-2025-46365
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description The Graphics: WebGPU component in Firefox contains incorrect boundary conditions. This issue does not have any reported real-world exploitation or estimated number of affected devices. The issue reside...
OESA-2025-2634 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodesCurrently, loadmicrocodeamd iterates over all NUMA nodes, retrieves theirCPU masks and...
OESA-2025-2633 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodesCurrently, loadmicrocodeamd iterates over all NUMA nodes, retrieves theirCPU masks and...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990599)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990599 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...
CVE-2024-45778 affecting package grub2 for versions less than 2.06-25
CVE-2024-45778 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...
CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2
CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
The vulnerability of the LESS script interface of the compiler used in the XWiki Platform, a platform for creating collaborative web applications, allows attackers to slow down the platform’s operation time.
The vulnerability of the LESS script API interface of the XWiki Platform, a platform for creating collaborative web applications, is related to improper authentication. Exploiting this vulnerability can allow an attacker to slow down the platform’s operation remotely...
CVE-2025-0678 affecting package grub2 for versions less than 2.06-15
CVE-2025-0678 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-7039 affecting package glib for versions less than 2.71.0-6
CVE-2025-7039 affecting package glib for versions less than 2.71.0-6. A patched version of the package is available...
CVE-2025-62005
CVE-2025-62005 is a CSRF vulnerability in WordPress plugin SUMO Memberships for WooCommerce (FantasticPlugins) affecting all versions before 7.8.0. Exploitation could enable a CSRF attack against authenticated users, with the NVD/Wordfence data listing a CVSS v3.1 base score of 7.1 (High) and an ...
EUVD-2020-21403
Malware in sbrugna...