26775 matches found
EUVD-2025-180348
Malicious code in arcturus-bellatrix-standard-miranda npm...
EUVD-2025-179466
Malicious code in css-loader-mui-wasat-standard npm...
Siemens SIMATIC S7-1500 Incorrect Calculation of Buffer Size (CVE-2025-0395)
When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. This plugin only works with Tenable.ot...
Siemens SIMATIC S7-1500 Exposure of Resource to Wrong Sphere (CVE-2019-12904)
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's position is...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.
Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...
EUVD-2025-116372
Malicious code in auth-radiant-kastra-standard npm...
EUVD-2025-114351
Malicious code in dotenv-safe-lint-standard-stream npm...
EUVD-2025-120839
Malicious code in vega-gatsby-backend-standard npm...
EUVD-2025-113558
Malicious code in fomalhaut-standard-slidev-achernar npm...
Malicious code in chalk-dactyl-orbit-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115980
Malicious code in bootstrap-standard-yonder-miranda npm...
Malicious code in markdown-pdf-callisto-lint-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb134446e468c46e4ca3d83d7094d21bafd81c5f717f091744634024b17d9c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grunt-astro-geckodriver-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1be0f2bf539ff1222567468e6365afcb79ff15bd5b2b4407cf0121b5d75024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121171
Malicious code in transform-apex-sadr-standard npm...
EUVD-2025-115939
Malicious code in buffer-nuxtjs-webdriverio-standard npm...
Malicious code in standard-eslint-plugin-mutation-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480790047255d5eacfffe50b3ebe2488ebafeea3734d7906fded36546b7ed765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113528
Malicious code in fork-csv-standard-async npm...
EUVD-2025-112262
Malicious code in jasmine-fetch-standard-terser-webpack-plugin npm...