CVE-2025-13193

Affects libvirt-based virtualization. CVE-2025-13193 causes external inactive snapshots for shut-down VMs to be world-readable, enabling information disclosure by unprivileged users. Public sources (Unity Linux UTSA-2025-993329; openSUSE openSUSE-SU-2025-20100-1; SUSE SUSE-SU-2026:0279-1) describ...

CVE-2025-13193

A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability. Mitigation Mitigation for this issue is either...

PT-2025-47172

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description A flaw exists in libvirt where external inactive snapshots for shut-down virtual machines are incorrectly created with world-readable permissions. This allows unprivileged users to inspect th...

libvirt 安全漏洞

libvirt is libvirt's open source Linux API for implementing Linux virtualization features. it supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtualization products used for other operating systems. A security vulnerability exists in libvirt that stems...

EUVD-2025-178923

Malicious code in fetch-readable-spectron-convict npm...

EUVD-2025-179792

Malicious code in chakra-ui-ophiuchus-sublimation-readable npm...

EUVD-2025-176780

Malicious code in readable-enif-module-saturnology npm...

Malicious code in sedna-nova-readable-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519472d81a3bae325559686848d27604cacef6d3088adabf65c3453988faa0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186959 Malicious code in fetch-readable-spectron-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63589f0ebd1c39360f807094399bb7293af123a3f30940dd806d287be6c8076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176918

Malicious code in publish-sadr-event-readable npm...

EUVD-2025-176781

Malicious code in readable-configstore-regulus-public npm...

EUVD-2025-177396

Malicious code in oscillation-readable-supernova-karma npm...

EUVD-2025-176779

Malicious code in readable-holography-buffer-odin npm...

EUVD-2025-178980

Malicious code in exoplanet-boson-readable-grunt npm...

EUVD-2025-177122

Malicious code in plutology-meteor-xerxes-readable npm...

EUVD-2025-180524

Malicious code in ablation-semantic-ui-readable-xerxes npm...

EUVD-2025-176745

Malicious code in registry-readable-nucleosynthesis-jsonp npm...

EUVD-2025-175425

Malicious code in zenobia-grus-readable-semantic-ui npm...

EUVD-2025-180385

Malicious code in apollo-geochronology-stream-readable npm...

EUVD-2025-179267

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...