The vulnerability of the Nagios XI monitoring tool relates to incorrect session duration settings, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Nagios XI monitoring tool is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the memcmp() function in OpenVPN software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the memcmp function in OpenVPN software is related to the use of a cryptographic algorithm that has vulnerabilities when processing HMAC requests. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the vc_do_resize() function in the drivers/tty/vt/vt.c file of the TTY console support driver for the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the vcdoresize function in the drivers/tty/vt/vt.c file of the TTY console support driver in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the video_get_user() function in the drivers/media/v4l2-core/v4l2-ioctl.c file of the Linux kernel’s multimedia device support driver allows a hacker to gain access to protected information.

The vulnerability of the videogetuser function in the drivers/media/v4l2-core/v4l2-ioctl.c file of the Linux kernel’s multimedia device support driver module is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the get_webmin_email_url() function in the Webmin control panel allows a hacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the getwebminemailurl function in the Webmin control panel is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity and accessibility of protected information through a specially created...

The vulnerability of the connector_bad_edid() function in the drivers/gpu/drm/drm_edid.c file of the Linux kernel’s Direct Rendering Infrastructure (DRI) support module allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the connectorbadedid function in the drivers/gpu/drm/drmedid.c file of the Linux kernel’s Direct Rendering Infrastructure support module is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the cmaCancelRoute() function in the drivers/infiniband/core/cma.c module of the Linux operating system’s kernel driver allows a hacker to gain access to protected information.

The vulnerability of the cmaCancelRoute function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient restrictions on authentication attempts. This allows a intruder to gain unauthorized access to protected information.

The vulnerability of the PowerChute Serial Shutdown software for controlling uninterruptible power sources is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an intruder operating remotely to gain unauthorized access to protected...

The vulnerability of the tcf_ct_handle_fragments() function in the net/sched/act_ct.c module of the Linux kernel allows a remote attacker to compromise the accessibility of protected information.

The vulnerability of the tcfcthandlefragments function in the net/sched/actct.c module of the Linux kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

The vulnerability of the usdGltf plugin in Adobe Format Plugins allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the usdGltf plugin relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of the usdGltf plugin in Adobe Format Plugins allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the usdGltf plugin relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Vulnerability of the __alloc_range() function in the drivers/gpu/drm/drm_buddy.c module – The DRI driver for Linux’s kernel, which allows attackers to compromise the integrity of protected information.

Vulnerability of the allocrange function in the drivers/gpu/drm/drmbuddy.c module – The DRI driver for Linux’s kernel-based direct rendering infrastructure is vulnerable due to insufficient handling of exceptional conditions. Exploiting this vulnerability could allow an attacker to compromise the...

EUVD-2025-178862

Malicious code in fork-object-protected-data-fork npm...

Malicious code in fork-object-protected-data-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d731ebcdace439a4ad52b59008be2f09ab2a515b808c75fbd971d22501b85805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the GraphQL-API interface of the SuiteCRM customer relationship management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GraphQL-API interface of the SuiteCRM customer relationship management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of an untrusted intermediate policy file during the processing of Canvas elements. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protecte...

The vulnerability of the Omnibox component in the Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the Omnibox component in the Google Chrome browser is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a malicious actor to disclose protected information...