kernel: transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

KB5068402 - Description of the security update for SQL Server 2017 CU31: November 11, 2025

None None...

KB5068407 - Description of the security update for SQL Server 2022 GDR: November 11, 2025

None None...

KB5068406 - Description of the security update for SQL Server 2022 CU21: November 11, 2025

None None...

KB5068405 - Description of the security update for SQL Server 2019 GDR: November 11, 2025

None None...

KB5068404 - Description of the security update for SQL Server 2019 CU32: November 11, 2025

None None...

KB5068403 - Description of the security update for SQL Server 2017 GDR: November 11, 2025

None None...

EUVD-2025-74494

Malicious code in levelaardvarkblack-35 npm...

EUVD-2025-81390

Malicious code in levelfalcon0xrequest npm...

EUVD-2025-69332

Malicious code in levelcatsharkz3n npm...

MAL-2025-105095 Malicious code in level_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362bfc3e24e48deecc08bc1e794486cc734414905895a31bd1b8f4c86e341068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71504

Malicious code in levelpythonz3n npm...

EUVD-2025-63319

Malicious code in levelcanidaez3n npm...

EUVD-2025-63317

Malicious code in levelgiraffez3n npm...

Malicious code in level_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789b8727cc2e26f94c5d8f52c378da42726f969e8c7c697fe4ec4cfbb0037b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d18df9ac7004b4b560a49dc66affee369f37c87c79f605c5ec1de1c1167492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12667 GitHub Gist Shortcode Plugin <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The GitHub Gist Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'gist' shortcode in all versions up to, and including, 0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-11129 Include fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type'

The Include Fussball.de Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api' and 'type' parameters in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-12126 The Total Book Project <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation

The The Total Book Project plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0 via several functions due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access a...

CVE-2025-11860 Twitter Feed <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Twitter Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ottwitterfeed' shortcode in all versions up to, and including, 1.3.1. This is due to the plugin not properly sanitizing user input and output of the 'width' and 'height' parameters. This makes it possible...