35526 matches found
CVE-2025-9524
The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploited after authenticating with a viewer- operator- or administrator-privileged service account...
CVE-2025-8998
It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account...
CVE-2025-6571
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
EUVD-2025-115232
Malicious code in comet-gacrux-pm2-middleware npm...
EUVD-2025-113888
Malicious code in eslint-hugo-indus-process npm...
EUVD-2025-111286
Malicious code in meissa-process-query-janus npm...
EUVD-2025-123376
Malicious code in process-apollo-axios-airbnb npm...
Malicious code in process-titan-mira-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79408ce54f9c53733daf659f97806d17e40693999ddfac0665977b04ae1c8558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123356
Malicious code in process-rehype-gatsby-rocket npm...
EUVD-2025-115360
Malicious code in child-process-framework-metalsmith-celeste npm...
EUVD-2025-114024
Malicious code in envconfig-sagitta-procyon-process npm...
EUVD-2025-111911
Malicious code in koa-process-gatsby-stream npm...
EUVD-2025-112253
Malicious code in jasmine-pegasus-ganymede-process npm...
EUVD-2025-124302
Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process npm...
EUVD-2025-111255
Malicious code in mensa-process-nightwatch-webdriver-manager npm...
EUVD-2025-116658
Malicious code in antares-uglify-js-child-process-galaxy npm...
EUVD-2025-115350
Malicious code in child-process-telesto-test-proxima npm...
EUVD-2025-120650
Malicious code in wasat-andromeda-phoebe-child-process npm...
Malicious code in spawn-wasat-kronos-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d110ed903961a6950cf5de4019f0f337122fadc51bed27728ef56e34211a329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...