Number withdrawal

R is a statistical computing software developed by The R Foundation. This CVE number has been withdrawn...

PT-2025-50247

Name of the Vulnerable Software and Affected Versions Selea Targa IP OCR-ANPR Camera affected versions not specified Description The Selea Targa IP OCR-ANPR Camera has an unauthenticated command injection issue in the utils.php file. This allows remote attackers to execute arbitrary shell command...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

TencentOS Server 4: R (TSSA-2024:0936)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0936 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

R.V.R Elettronica TEX 安全漏洞

The R.V.R Elettronica TEX is an FM transmitter from R.V.R Elettronica, Italy. A security vulnerability exists in the R.V.R Elettronica TEX TEXL-000400 version and TLAN-000400 version, which stems from improper access control and could lead to complete system compromise...

SUSE-SU-2025:4111-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857. ...

Malicious code in nuyar-id-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e62f534a3e098eee2d42f84833cd941a4df4b143229d3a30d6b51d73392cef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139084

Malicious code in nuyar-id-r npm...

EUVD-2025-144548

Malicious code in augis-pomdoi9r-r npm...

Malicious code in jelek-r-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee14f533151602d16e016866b4d443fdb28b89c357a26f9f9402b6810235a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb4cb07fdc280c3172a47139f39058eca0dda24f22b5fc1657ad23d4d4cf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78458 Malicious code in gita-kacang23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4335baff7a8105f0de96a891c04f7f0774d89e2ddf8d66a57922aa57840a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81523 Malicious code in surya-jamblang82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6b7778f5fb79b1ff74543a8bd075c1f97b4911f6f0d71a46605e4b018b55a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-gudeg6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1967db14512f3585df618752cd22b4ca9fb0bbd8d3405005ddfc63ba7d76358c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-nasi76-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef957086d9b2858384fa69a78259aa49ef31c946c88a49a5d1a1027d3efaae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11546

CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends...

CVE-2025-11546

The CVE-2025-11546 entry affects NEC CLUSTERPRO X for Linux (versions 4.0–5.2), EXPRESSCLUSTER X for Linux (4.0–5.2), CLUSTERPRO X SingleServerSafe for Linux (4.0–5.2), and EXPRESSCLUSTER X SingleServerSafe for Linux (4.0–5.2). The connected sources describe an OS command injection vulnerability ...

EUVD-2025-38189

CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988995 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990157 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing ...