13120 matches found
MAL-2025-5327 Malicious code in justeat-storybook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 577d8ffd11e5da3a5000b8a390c45c8474d2dd362e509a65a107f2b0df13e563 The OpenSSF Package Analysis project identified 'justeat-storybook' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...
WordPress Pressroom - News Magazine WordPress Theme Theme <= 6.9 is vulnerable to Cross Site Scripting (XSS)
Software Pressroom - News Magazine WordPress Theme Type Theme Vulnerable versions = 6.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-32311 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8441b464fd57 Credits Tran Nguyen...
MAL-2025-5250 Malicious code in nstmrt-stf-api-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29e69957371cd4fe181aa65e4f774a3c807e8ff11ebda5f2226dd881f89961ae The OpenSSF Package Analysis project identified 'nstmrt-stf-api-poc' ...
Malicious code in ted-ui (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5466 Malicious code in ted-ui (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5393 Malicious code in dropdown_styles.css (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5426 Malicious code in kendo.core.min (npm)
The package communicates with a domain associated with malicious activity...
RHSA-2025:9584 Red Hat Security Advisory: kernel security update
Bulletin has no description...
MAL-2025-5266 Malicious code in attributors (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbefeaf34d3565832f706ae95a143747b2d0ff0a593532a3b8088020fd11bc1d The OpenSSF Package Analysis project identified 'attributors' @ 99.99...
BELL-CVE-2025-38083
Bulletin has no description...
CGA-GGQG-WV33-6HR8
Bulletin has no description...
CGA-J2PH-8QFQ-2Q24
Bulletin has no description...
CGA-P899-8W4F-7VCH
Bulletin has no description...
WordPress Litho Theme <= 3.0 is vulnerable to Arbitrary File Deletion
Software Litho Type Theme Vulnerable versions = 3.0 Fixed in 3.1 OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2025-49879 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID b5c6a3b3bdf8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...
DLA-4230-1 xorg-server - security update
Bulletin has no description...
CGA-4P7H-XGPG-2MXX
Bulletin has no description...
CGA-XGC7-G52W-XPMH
Bulletin has no description...
CGA-WXJX-2HC8-G7PH
Bulletin has no description...