13120 matches found
MINI-V6PX-HWQC-J5RM
Bulletin has no description...
MINI-CRRJ-58Q2-4QP4
Bulletin has no description...
MINI-X2RC-MR9J-9226
Bulletin has no description...
MINI-MVMP-CV59-J65Q
Bulletin has no description...
Malicious code in is (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a1baf574e6278b3c20c30fdd7875414ed04c1a695eb226fd43328004c6916873 "is" had unauthorized new versions published that contained malicious obfuscated code via account compromise...
MAL-2025-6020 Malicious code in is (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a1baf574e6278b3c20c30fdd7875414ed04c1a695eb226fd43328004c6916873 "is" had unauthorized new versions published that contained malicious obfuscated code via account compromise...
BELL-CVE-2025-38351
Bulletin has no description...
BIT-GRAFANA-2025-3415
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01,...
MAL-2025-6177 Malicious code in lint-pr-title (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a7398205d96f4d045fedf2fbd41ba545c40048a2e9683747ab8bec7ac77a1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-30465
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: A remote code execution issue exists due to an uninitialized variable during AR file parsing. Recommendations: At the moment, there is no information about a newer version that...
Roundcube: Multiple Vulnerabilities
Background Free and open source webmail software for the masses, written in PHP. Description Multiple vulnerabilities have been discovered in Roundcube. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround Ther...
WordPress Ebook Store plugin <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting via Order Details vulnerability discovered by Bee in WordPress Plugin Ebook Store versions = 5.8012...
PYSEC-2025-71
Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack. This XSS would notably allow an attacker to execute JavaScript code ...
CGA-7CCG-JM7Q-GWXV
Bulletin has no description...
CGA-G92C-J3HF-X9FM
Bulletin has no description...
CGA-RHF3-CGM4-5JCG
Bulletin has no description...
CGA-J3Q7-3JFC-2GHC
Bulletin has no description...
CGA-CQC9-MWRX-WC3F
Bulletin has no description...