13120 matches found
MINI-5R5F-6FRQ-66WX
Bulletin has no description...
MINI-2FVM-QMMP-J33M
Bulletin has no description...
CGA-3RWV-37PJ-GM94
Bulletin has no description...
CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting
A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...
CVE-2025-45768
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement...
CGA-8R46-4G7Q-W5W7
Bulletin has no description...
GO-2025-3824 Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama
Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama...
CVE-2025-54575 ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks
ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file containing a malformed comment extension block with a missing block terminator can cause the ImageSharp GIF decoder to enter an infinite loop while attempting to skip the block. Th...
MAL-2025-6691 Malicious code in actions-set-env-vars (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6716 Malicious code in enkryptcom (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6713 Malicious code in deno-r4-basic (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6752 Malicious code in plugin-commonjs (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6683 Malicious code in 7702-eoa-implementation (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6699 Malicious code in blanl-pkg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6755 Malicious code in react-native-gainsight-px (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-53111
GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19...
CGA-VX37-RWM7-FPF2
Bulletin has no description...
CGA-7F4Q-7GWF-75FM
Bulletin has no description...