CSRF issue on preview pages in Bolt CMS

...

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none

...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

OSV-2025-803 Global-buffer-overflow in icaltime_day_of_year

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=448424495 Crash type: Global-buffer-overflow READ 4 Crash state: icaltimedayofyear expandbymonthdays expandyeardays...

CVE-2025-38664 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38664 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38464 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38464 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38477 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38477 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39832 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39832 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-53481

In the Linux kernel, the following vulnerability has been resolved: ubi: ubiwlputpeb: Fix infinite loop when wear-leveling work failed Following process will trigger an infinite loop in ubiwlputpeb: ubifsbgt ubibgt ubifslebunmap ubilebunmap ubiebaunmapleb ubiwlputpeb wearlevelingworker e1 =...

CVE-2025-56515

creationtimestamp| type| source ---|---|--- 2025-09-30 21:00:04+00:00| published-proof-of-concept| Telegram/D5QPZ9WrgqkEioy1cmTYsg8EQzVbRgvjy-VGvcVDsQxewEI 2025-10-03 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2cxpq7udx23...

Malicious code in sendbird-ai-agent-samples (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47613 Malicious code in babel-ganache (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acqui-hero-section (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-39810

CVE-2025-50879 - None CVE ID : CVE-2025-50879 Published : Sept. 26, 2025, 8:15 p.m. | 3 hours, 9 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue...

Malicious code in notificare-go-web (npm)

The package notificare-go-web was found to contain malicious code...

Malicious Package

Overview dotenvx-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-55556

TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application...

CVE-2025-23339

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege leve...

CVE-2025-55556

creationtimestamp| type| source ---|---|--- 2025-09-24 02:11:42+00:00| seen| https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc...

Important: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...