Microsoft Word Code Execution Vulnerability (CNVD-2025-18817)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which is caused due to a post-release usage error when opening a specially crafted file. An attacker could exploit this vulnerability ...

Linux Distros Unpatched Vulnerability : CVE-2024-56743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfscommon: must not hold RCU while calling nfsdfileputlocal Move holding the RCU from...

Linux Distros Unpatched Vulnerability : CVE-2022-22748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol. This...

Linux Distros Unpatched Vulnerability : CVE-2025-46805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed...

Linux Distros Unpatched Vulnerability : CVE-2022-50142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: intelth: msu: Fix vmalloced buffers After commit f5ff79fddf0e dma-mapping: remove...

Linux Distros Unpatched Vulnerability : CVE-2024-45159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables optional authentication of the client, if the client-provided...

Linux Distros Unpatched Vulnerability : CVE-2025-38408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: genirq/irqsim: Initialize work context pointers properly Initialize ops member's pointers...

MAL-2025-12477 Malicious code in @zalastax/nolb-muw (npm)

The package @zalastax/nolb-muw was found to contain malicious code...

MAL-2025-14647 Malicious code in api-usage_create-tensor (npm)

The package api-usagecreate-tensor was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-23252 Malicious code in installments (npm)

The package installments was found to contain malicious code...

MAL-2025-37960 Malicious code in usage-tracker-public (npm)

The package usage-tracker-public was found to contain malicious code...

MAL-2025-9043 Malicious code in @malware-test-usage-civvy-aurum-narre/test-mlw3-usage-civvy-aurum-narre (npm)

The package @malware-test-usage-civvy-aurum-narre/test-mlw3-usage-civvy-aurum-narre was found to contain malicious code...

Malicious code in usage-tracker-public (npm)

The package usage-tracker-public was found to contain malicious code...

MAL-2025-28498 Malicious code in ort-rn-basic-usage (npm)

The package ort-rn-basic-usage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in ort-rn-basic-usage (npm)

The package ort-rn-basic-usage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Rockwell Automation Studio 5000 Logix Designer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to crash the device or execute malicious code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...

PT-2025-46593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SCSI subsystem, specifically within the pm80xx driver. The issue involves an array-index-out-of-bounds condition that occurs during the removal of a...

EulerOS 2.0 SP11 : gnupg2 (EulerOS-SA-2025-1952)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1957)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gpio: Restrict usage of GPIO chip irq members before initializationCVE-2022-49072 mmc: core: use sysfsemit instead of sprintf.CVE-2022-49267 ipv4:...

MAL-2025-191832 Malicious code in pycrackhash (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3323afe460298d80a354497acdd641752c5fb6bce2dce3d7e7625d7a46f1d7c When using methods from the package, it downloads an obfuscated code from Github and puts it in multiple localisation. While it appears that this code is used ...