1580 matches found
CVE-2020-9118
There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Affected product versions include:AIS-BW80H-0...
CVE-2020-9250
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. Vulnerability ID: HWPSIRT-2019-12302 Th...
MAL-2025-4187 Malicious code in o-date (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4181 Malicious code in hello-user-test-npm-com-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4221 Malicious code in keybard (PyPI)
--- -= Per source details. Do not edit below this line.=-...
RHSA-2025:8056 Red Hat Security Advisory: kernel security update
Bulletin has no description...
OPENSUSE-SU-2025:15135-1 govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250515T200012-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15132-1 dante-1.4.4-1.1 on GA media
These are all security issues fixed in the dante-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-4039 Malicious code in wdpr-ra-javascript-native-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e2b40d8e2ee8d311cf5e007c4480255217d359bdde3c42115e42ad42f35dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3938 Malicious code in pootle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e85bef7e8a01d18636b40c7543cadd257472b0b984989ba4ca747f6c4c6f5a The OpenSSF Package Analysis project identified 'pootle' @ 9.9.10 npm as malicious. It is considered malicious because: - The package communicat...
CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
OPENSUSE-SU-2025:15107-1 python311-ujson-5.10.0-1.5 on GA media
These are all security issues fixed in the python311-ujson-5.10.0-1.5 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15119-1 ruby3.4-rubygem-kramdown-2.4.0-1.15 on GA media
These are all security issues fixed in the ruby3.4-rubygem-kramdown-2.4.0-1.15 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15100-1 python311-oauthlib-3.2.2-5.4 on GA media
These are all security issues fixed in the python311-oauthlib-3.2.2-5.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15124-1 ruby3.4-rubygem-rails-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rails-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed...
Malicious code in lcs-ui-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b66ec079f142a51c33d484015aab0384b514dca3415e27b84138f92dd2ea818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2025:7138 Red Hat Security Advisory: protobuf security update
Bulletin has no description...
MAL-2025-3781 Malicious code in sw-cur (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6e97eb66e9295d27e2c439734b0d7a8a4479ea22612dd7c5623827fcbb53eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3745 Malicious code in odin-backoffice-starter-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2982abf6f95afddda54146444463c8334c7677ea0b5d8fb203c536dc54470188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...