13120 matches found
BELL-CVE-2023-53091
Bulletin has no description...
BELL-CVE-2023-53109
Bulletin has no description...
BELL-CVE-2023-53038
Bulletin has no description...
BELL-CVE-2023-53066
Bulletin has no description...
BELL-CVE-2023-53041
Bulletin has no description...
MAL-2025-3971 Malicious code in sophs-test-package-test5 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-3904 Malicious code in lrc20-js-sdk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80ed84544322e91ea371449b18229734f12afd46bd03c7f7a5a04947ce64ba7 Any computer that has this package installed or running should be considered...
CVE-2025-1909 BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider
The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for...
MAL-2025-3970 Malicious code in poc_drakenkun (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-46559 Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`
Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in Mk:api allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. The missing validation allows malicious...
MAL-2025-3710 Malicious code in design-system-cmp (npm)
The package communicates with a domain associated with malicious activity...
CVE-2024-58237 bpf: consider that tail calls invalidate packet pointers
In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making...
Insufficient Verification Of Data Authenticity
react-router is vulnerable to data spoofing. The vulnerability is due to improper request validation allows the ability to manipulate pre-rendered data via custom headers, allowing full modification of the data object embedded in HTML...
RHSA-2025:4449 Red Hat Security Advisory: xmlrpc-c security update
Bulletin has no description...
BELL-CVE-2023-53127
Bulletin has no description...
BELL-CVE-2023-53111
Bulletin has no description...
BELL-CVE-2023-53042
Bulletin has no description...
CVE-2025-45242
Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...
ALSA-2025:4461 Moderate: nodejs:20 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...