EUVD-2025-111772

Malicious code in less-non-blocking-run-script-xanthus npm...

EUVD-2025-115334

Malicious code in chromedriver-framework-private-less npm...

EUVD-2025-115534

Malicious code in ceres-oberon-less-loader-proxima npm...

EUVD-2025-112408

Malicious code in io-restart-less-neptune npm...

Malicious code in dynamo-winston-less-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5865ce4555741b83e7e2292332e129b48064cdba03fd7b905da6b142e1f64b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114048

Malicious code in enif-sails-less-meissa npm...

EUVD-2025-111769

Malicious code in less-request-farout-delphinus npm...

EUVD-2025-112388

Malicious code in iota-fomalhaut-less-loader-repository npm...

EUVD-2025-116041

Malicious code in blitz-stream-less-yakutsk npm...

CVE-2025-13015

Mozilla Firefox and Firefox ESR are affected by a spoofing vulnerability caused by errors in the user interface's information representation. This flaw allows a remote attacker to conduct spear-phishing attacks . The issue impacts versions of Firefox prior to 145 , Firefox ESR prior to 140.5 , an...

PT-2025-46365

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description The Graphics: WebGPU component in Firefox contains incorrect boundary conditions. This issue does not have any reported real-world exploitation or estimated number of affected devices. The issue reside...

OESA-2025-2633 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodesCurrently, loadmicrocodeamd iterates over all NUMA nodes, retrieves theirCPU masks and...

OESA-2025-2634 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodesCurrently, loadmicrocodeamd iterates over all NUMA nodes, retrieves theirCPU masks and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990599 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing CPC data If the NumEntries field in the CPC...

CVE-2024-45778 affecting package grub2 for versions less than 2.06-25

CVE-2024-45778 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2

CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

XWiki Platform LESS Script Slow DoS

The vulnerability of the LESS script API interface of the XWiki Platform, a platform for creating collaborative web applications, is related to improper authentication. Exploiting this vulnerability can allow an attacker to slow down the platform’s operation remotely...

CVE-2025-0678 affecting package grub2 for versions less than 2.06-15

CVE-2025-0678 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...

CVE-2025-7039 affecting package glib for versions less than 2.71.0-6

CVE-2025-7039 affecting package glib for versions less than 2.71.0-6. A patched version of the package is available...

CVE-2025-62005

CVE-2025-62005 is a CSRF vulnerability in WordPress plugin SUMO Memberships for WooCommerce (FantasticPlugins) affecting all versions before 7.8.0. Exploitation could enable a CSRF attack against authenticated users, with the NVD/Wordfence data listing a CVSS v3.1 base score of 7.1 (High) and an ...