fox (>=1.5.0, <=1.6.2), pomodoro-timer (>=0.0.4, <=0.0.5) +3 more potentially affected by unknown CVE via after-time (>=0.0.0, <=0.0.1)

after-time NPM version =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1 - tomato-timer 0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14147...

Malicious code in @marcos_feitoza/timer-tracker-swim (npm)

The package @marcosfeitoza/timer-tracker-swim was found to contain malicious code...

Malicious code in builderscon-session-timer-domain (npm)

The package builderscon-session-timer-domain was found to contain malicious code...

MAL-2025-9097 Malicious code in @marcos_feitoza/timer-tracker-swim (npm)

The package @marcosfeitoza/timer-tracker-swim was found to contain malicious code...

MAL-2025-16329 Malicious code in builderscon-session-timer-domain (npm)

The package builderscon-session-timer-domain was found to contain malicious code...

Malicious code in test-mlw2-liras-timer (npm)

The package test-mlw2-liras-timer was found to contain malicious code...

MAL-2025-35697 Malicious code in test-mlw2-liras-timer (npm)

The package test-mlw2-liras-timer was found to contain malicious code...

CVE-2025-34153

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

Linux Distros Unpatched Vulnerability : CVE-2022-49387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2lwdt: Fix 32bit overflow issue The value of timercycleus can be 0 due to 32bit...

Linux Distros Unpatched Vulnerability : CVE-2024-26654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard-timer could schedule the spudmawork and the spudmawork could also arm the...

Linux Distros Unpatched Vulnerability : CVE-2019-19807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to...

Linux Distros Unpatched Vulnerability : CVE-2018-12896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix- timers.c in the POSIX timer code is caused by the way the...

Linux Distros Unpatched Vulnerability : CVE-2017-18344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent-sigevnotify field,...

Linux Distros Unpatched Vulnerability : CVE-2022-2318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any...

Linux Distros Unpatched Vulnerability : CVE-2021-47357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - atm: iphase: fix possible use-after-free in iamoduleexit This module's remove path calls deltimer. However, that function does not wait until the timer handler...

Linux Distros Unpatched Vulnerability : CVE-2021-47209

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent dead task groups from regaining cfsrq's Kevin is reporting crashes whic...

Linux Distros Unpatched Vulnerability : CVE-2021-47356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mISDN: fix possible use-after-free in HFCcleanup This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes...

Linux Distros Unpatched Vulnerability : CVE-2023-52847

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: bttv: fix use after free error due to btv-timeout timer There may be some a race condition between timer function bttvirqtimeout and bttvremove. The tim...

Linux Distros Unpatched Vulnerability : CVE-2024-26724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed to h...

Linux Distros Unpatched Vulnerability : CVE-2024-38583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix use-after-free of timer for log writer thread Patch series nilfs2: fix log writer related issues. This bug fix series covers three nilfs2 log...