1826 matches found
Malicious code in astrobiology-less-loader-plutology-nightwatch (npm)
The package astrobiology-less-loader-plutology-nightwatch was found to contain malicious code...
MAL-2025-43416 Malicious code in aether-venus-lacerta-less-loader (npm)
The package aether-venus-lacerta-less-loader was found to contain malicious code...
MAL-2025-46439 Malicious code in ultra-less-ethology-string (npm)
The package ultra-less-ethology-string was found to contain malicious code...
MAL-2025-46478 Malicious code in ursa-nestjs-less-loader-sails (npm)
The package ursa-nestjs-less-loader-sails was found to contain malicious code...
MAL-2025-45564 Malicious code in pipe-less-loader-fornax-regulus (npm)
The package pipe-less-loader-fornax-regulus was found to contain malicious code...
CVE-2025-48964 affecting package iputils for versions less than 20240117-2
CVE-2025-48964 affecting package iputils for versions less than 20240117-2. A patched version of the package is available...
WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Clanora versions 1.3.1...
CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4
CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2017-6820
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rcubeutils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets CSS...
Multiple vulnerabilities in Movable Type
Overview Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. Use of less trusted source CWE-348 - CVE-2025-53522 Open redirect CWE-601 - CVE-2025-55706 Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN...
CVE-2025-53522
CVE-2025-53522 affects Movable Type and related editions, caused by use of a less trusted source (CWE-348). A remote unauthenticated attacker could trigger a tampered password-reset email. Documented impact: password reset email may be forged by exploiting the trusted source weakness. Public disc...
Linux Distros Unpatched Vulnerability : CVE-2022-48624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE. CVE-2022-48624 Note that Nessus relies on the presence of the package as...
JVN#76729865: Multiple vulnerabilities in Movable Type
Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. Use of less trusted source（CWE-348） CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 6.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Base Score 5.3 CVE-2025-53522 Open...
Linux Distros Unpatched Vulnerability : CVE-2023-5727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer...
CVE-2025-8041 Incorrect URL truncation in Firefox for Android
In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141...
kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, loadmicrocodeamd iterates over all NUMA nodes, retrieves their CPU masks and unconditionally accesses per-CPU data for the first CPU of each mask...
Linux Distros Unpatched Vulnerability : CVE-2023-26604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the systemctl statu...
CVE-2025-51510
MoonShine contains a SQL injection in the Blog module via the data parameter of the moonshine-tree-resource component (versions Categories page. Root cause: unsafely embedded data parameter allows injection; PoCs and public reports describe extracting data from moonshine_users and demonstrating ...
CVE-2025-8675 AI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095
Server-Side Request Forgery SSRF vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6...