7984 matches found
Malicious code in v-plausible (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aed8dcc55b812ae7b489eb98ff12b0714a8b37eb43ef61199484fb4cc93b6c6 The package v-plausible was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198451
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through = 2.3.2...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
PT-2025-47765
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through = 2.3.2...
USN-7875-1 linux-oracle vulnerabilities
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...
USN-7875-1: Linux kernel (Oracle) vulnerabilities
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...
CVE-2025-13229
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
R.V.R Elettronica TEX 安全漏洞
The R.V.R Elettronica TEX is an FM transmitter from R.V.R Elettronica, Italy. A security vulnerability exists in the R.V.R Elettronica TEX TEXL-000400 version and TLAN-000400 version, which stems from improper access control and could lead to complete system compromise...
PT-2025-47218
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.175 Description A type confusion issue exists within the V8 JavaScript engine in Google Chrome. This flaw could allow a remote attacker to potentially exploit heap corruption by using a specially...
The vulnerability of the ipi_remote_fence_i() function in the arch/riscv/mm/cacheflush.c module on RISC-V architecture processors in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ipiremotefencei function in the arch/riscv/mm/cacheflush.c module on RISC-V architecture processors in Linux operating systems is related to improper resource management. Exploiting this vulnerability could allow an attacker to cause a service failure...
Siemens SIMATIC S7-1500 Deadlock (CVE-2023-52699)
In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A writelock&pointerslock = readlock&pointerslock deadlock bug and a...
EUVD-2025-137768
Malicious code in gocay-uga-agidugafyi npm...
EUVD-2025-138447
Malicious code in polymer-aia-affag npm...
EUVD-2025-135015
Malicious code in unimunaf-safiiaf-cuagu npm...
CVE-2025-60706
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...
EUVD-2025-145534
Malicious code in gracewhite npm...
MAL-2025-155382 Malicious code in guras-asia-v (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45faebf774d4bc77174806ed291f085e894027e5145addc89728ddac5c45f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in madrid-ucl-v (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...