34581 matches found
EUVD-2025-131923
A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
CVE-2025-60710
Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...
SUSE-SU-2025:4074-1 Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files bsc1253096 Other fixes: - podman and buildah with runc 1.3.2 fail with lots of warnings as rootless bsc1252543...
CVE-2025-9524
The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploited after authenticating with a viewer- operator- or administrator-privileged service account...
CVE-2025-8998
It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account...
CVE-2025-6571
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
EUVD-2025-120100
Malicious code in yonder-child-process-writable-postgres npm...
EUVD-2025-124008
Malicious code in orbit-thuban-child-process-writable npm...
EUVD-2025-120942
Malicious code in unuk-sirius-quantum-process npm...
Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111861
Malicious code in lacerta-ursa-process-epimetheus npm...
Malicious code in process-titan-mira-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79408ce54f9c53733daf659f97806d17e40693999ddfac0665977b04ae1c8558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quito-phoenix-process-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b557507e22a34ed6c77ffa39819f688ae4f6a674cf5520022347c6e212560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115608
Malicious code in castor-xo-process-yildun npm...
EUVD-2025-124819
Malicious code in module-blitz-process-eridanus npm...
EUVD-2025-124302
Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process npm...
EUVD-2025-123376
Malicious code in process-apollo-axios-airbnb npm...
EUVD-2025-123610
Malicious code in pm2-run-script-eslint-plugin-leda npm...