11974 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-42105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserved inodes. This series fixes one use-after-free issue reported ...
Malicious code in new-range (npm)
The package new-range was found to contain malicious code...
eksi-server (>=0.0.0 <=0.0.8), eksi-sozluk (>=0.0.0 <=0.0.13) +2 more potentially affected by unknown CVE via new-range (=0.0.0)
new-range NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...
dm-ide (>=0.0.1 <=1.2.8) potentially affected by unknown CVE via electrin (=0.0.1-security)
electrin NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on electrin and may be impacted: - dm-ide =0.0.1, =1.2.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-19424...
MAL-2025-27367 Malicious code in new-range (npm)
The package new-range was found to contain malicious code...
MAL-2025-36524 Malicious code in test-mlw2-tuxes-range (npm)
The package test-mlw2-tuxes-range was found to contain malicious code...
Malicious code in via-date-range (npm)
The package via-date-range was found to contain malicious code...
Malicious code in test-mlw2-tuxes-range (npm)
The package test-mlw2-tuxes-range was found to contain malicious code...
radio-paradise-api (=0.0.1), turkish-synonyms-api (=0.0.0) potentially affected by unknown CVE via memoize-with-leveldb (>=0.0.1 <=2.0.0)
memoize-with-leveldb NPM version =0.0.1, =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on memoize-with-leveldb and may be impacted: - radio-paradise-api =0.0.1 - turkish-synonyms-api =0.0.0 Source cves: unknown CVE Source advisory:...
MAL-2025-38289 Malicious code in via-date-range (npm)
The package via-date-range was found to contain malicious code...
CVE-2025-53221
CVE-2025-53221 affects WordPress plugin CodeablePress (
CVE-2025-53241
CVE-2025-53241 is a Server-Side Request Forgery (SSRF) affecting the WordPress Simplified plugin, with vulnerable versions listed as n/a through 1.0.9 (and related notes indicating up to 1.0.11 in advisories). The underlying issue is an SSRF vulnerability in Simplified that permits the server to ...
CVE-2025-54409 AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)
AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a...
CVE-2025-36047 IBM WebSphere Application Server Liberty denial of service
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
CVE-2025-28987
Server-Side Request Forgery SSRF vulnerability in PressForward PressForward pressforward allows Server Side Request Forgery.This issue affects PressForward: from n/a through = 5.9.5...
IBM WebSphere Application Server Liberty 17.0.0.3 < 25.0.0.9 (7242027)
The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7242027 advisory. - IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a...
PT-2025-33258 · WordPress · Magical Posts Display
Name of the Vulnerable Software and Affected Versions: Magical Posts Display versions 1.0.0 through 1.2.52 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update Magical Posts Display to...
CVE-2025-54063
Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on a...
