44270 matches found
Malicious code in tailwind-autoanimation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239c7b556685c76e1b25bf8ec701e0688ec975920ddc409d56365b6c38b30edc The package tailwind-autoanimation was found to contain malicious code. Source: ghsa-malware...
CVE-2025-66620 Columbia Weather Systems MicroServer Command Shell in Externally Accessible Directory
An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the fil...
CVE-2025-64305 Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk
MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...
GHSA-JJ3X-WXRX-4X23 vulnerabilities
Vulnerabilities for packages: awx, request-1276, airflow, kubeflow-pipelines-visualization-server, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, authentik, checkov, open-webui, py3-vllm-cuda-12.4...
CVE-2025-69223 vulnerabilities
Vulnerabilities for packages: awx, request-1276, airflow, kubeflow-pipelines-visualization-server, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, kserve, dask-kubernetes, py3-cassandra-medusa, authentik, checkov, open-webui, py3-vllm-cuda-12.4...
CVE-2025-4675
creationtimestamp| type| source ---|---|--- 2026-01-07 18:06:41+00:00| seen| Telegram/z4Hdig2Y-CzYhBdtVlGTwJ9KW9iSWl3bFYnRlWuZ8V2CdM 2026-01-08 19:06:02+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-011 2026-05-12 10:00:00+00:00| seen|...
CVE-2022-27502
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...
CVE-1999-0025
root privileges via buffer overflow in df command on SGI IRIX systems...
CVE-1999-0548
A superfluous NFS server is running, but it is not importing or exporting any file systems...
CVE-1999-0359
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords...
CVE-1999-0197
finger 0@host on some systems may print information on some user accounts...
CVE-1999-0377
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services...
CVE-1999-0027
root privileges via buffer overflow in eject command on SGI IRIX systems...
CVE-1999-0085
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname...
CVE-1999-0768
Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable...
CVE-1999-0918
Denial of service in various Windows systems via malformed, fragmented IGMP packets...
CVE-1999-0387
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords...
CVE-1999-0909
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...