9517 matches found
EUVD-2025-178587
Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer npm...
EUVD-2025-176346
Malicious code in slides-install-dynamo-dotenv-parse-variables npm...
EUVD-2025-175875
Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...
EUVD-2025-175957
Malicious code in thread-compile-parse-decrypt-air npm...
EUVD-2025-179162
Malicious code in emulate-catch-file-mu-parse npm...
EUVD-2025-176871
Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...
EUVD-2025-177133
Malicious code in playwright-dotenv-parse-variables-parcel-less npm...
EUVD-2025-180388
Malicious code in apollo-dotenv-parse-variables-stratigraphy-private npm...
Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...
EUVD-2025-50823
Parse Server allows public explain queries which may expose sensitive database performance information and schema details...
PT-2025-46787
🟠 Parse Server, Information Disclosure, CVE-2023-43605 Medium https://t.co/5zLHiihOZO...
Siemens SIMATIC S7-1500 Incorrect Calculation of Buffer Size (CVE-2024-45490)
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
CVE-2025-40198 ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...
kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b548365 "mt76: mt7921: rely on...
BIT-PARSE-2025-64430 Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions 4.2.0 through 7.5.3, and 8.0.0 through 8.4.0, there is a Server-Side Request Forgery SSRF vulnerability in the file upload functionality when trying to upload a Parse.File with uri...
kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b548365 "mt76: mt7921: rely on...
kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b548365 "mt76: mt7921: rely on...
EUVD-2025-121877
Malicious code in socketio-dotenv-parse-variables-phoenix-chalk npm...