1425 matches found
EUVD-2026-0288
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
189 Mail: undisclosed vulnerability (ZAI-2026-YOKP1A)
Not disclosed. Details are not yet publicly disclosed...
EUVD-2025-204943
Malicious code in amournapraia npm...
EUVD-2025-204671
Malicious code in colorfulpacket PyPI...
EUVD-2025-204016
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-203436
WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server...
Arbitrary file write via tar traversal
Summary A crafted tar.gz passed to MLflow pyfunc extraction is unpacked with tarfile.extractall without path validation. Archive entries containing .. or absolute paths can escape the destination directory and write arbitrary files on the host. This is reachable when users supply prebuiltenvuri o...
CVE-2025-8110
creationtimestamp| type| source ---|---|--- 2025-12-10 15:07:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115695894618278419 2025-12-10 15:37:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nfazcxjj2g 2025-12-10 17:26:06+00:00| seen|...
CVE-2025-64156
creationtimestamp| type| source ---|---|--- 2025-12-09 18:46:30+00:00| seen| https://gist.github.com/Darkcrai86/32d86c31fb28affcca89ef34ff2489fb 2025-12-09 19:11:25+00:00| seen| https://gist.github.com/Darkcrai86/4806712bee6f08cd7da8a8819e219d5d...
CVE-2025-14195
creationtimestamp| type| source ---|---|--- 2025-12-07 19:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7gaua6bn32w...
CVE-2025-13360
creationtimestamp| type| source ---|---|--- 2025-12-05 09:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7a64alhdh2w...
EUVD-2025-200206
Malicious code in data-xabit npm...
Vulnerabilities fixed in GitLab
GitLab has fixed vulnerabilities in its Community Edition CE and Enterprise Edition EE versions. The vulnerabilities include the ability for unauthenticated users to cause Denial of Service DoS conditions by submitting malicious JSON requests. In addition, unauthenticated users could join arbitra...
EUVD-2025-199171
Malicious code in create-kinvey-flex-service npm...
EUVD-2025-198914
Malicious code in @postman/secret-scanner-wasm npm...
EUVD-2025-175557
Malicious code in whitedwarf-meissa-standard-mira npm...
EUVD-2025-177077
Malicious code in prettier-meteor-mineralogy-vuepress npm...
EUVD-2025-136178
Malicious code in itale-adci-yafyudbruwegfheryg npm...