1498 matches found
MAL-2025-31914 Malicious code in red-contrib-enable-gps (npm)
The package red-contrib-enable-gps was found to contain malicious code...
MAL-2025-27858 Malicious code in nr1-browser-analyzer (npm)
The package nr1-browser-analyzer was found to contain malicious code...
MAL-2025-34356 Malicious code in t5.admin (npm)
The package t5.admin was found to contain malicious code...
CVE-2025-8314 Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress plugin Software Issue Manager 跨站脚本漏洞
The WordPress Software Issue Manager plugin is a project-based WordPress plugin for tracking software defects, issues, tasks, and product feature requests, with support for customized reporting. The WordPress Software Issue Manager plugin suffers from a cross-site scripting vulnerability that ste...
PT-2025-32624 · WordPress · Software Issue Manager
Name of the Vulnerable Software and Affected Versions: Software Issue Manager plugin for WordPress versions up to and including 5.0.1 Description: The Software Issue Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting through the noaccess msg parameter due to insufficient...
CGA-925R-XP4G-39WR
Bulletin has no description...
MINI-CXRF-822R-3XJJ
Bulletin has no description...
MINI-H6Q6-GRRH-24RG
Bulletin has no description...
MINI-H66C-2WH7-68H4
Bulletin has no description...
MINI-F7GJ-PHFH-RG9P
Bulletin has no description...
MINI-9M25-5XP9-CVGJ
Bulletin has no description...
MINI-7FWC-F2G6-7RCC
Bulletin has no description...
MINI-5GV5-44CF-6278
Bulletin has no description...
MINI-55PG-V2P9-9JF9
Bulletin has no description...
MINI-XWRF-429X-R36H
Bulletin has no description...
MINI-25Q9-9C6R-R592
Bulletin has no description...
MINI-23WM-JHM6-4R63
Bulletin has no description...
GO-2025-3823 Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service in github.com/kyverno/kyverno
Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service in github.com/kyverno/kyverno...
Duplicate Advisory: `ed25519-dalek` Double Public Key Signing Function Oracle Attack
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5vr-6qhr-36cc. This link is maintained to preserve external references. Original Description The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair...