Malicious code in blaze-dotenv-parse-variables-spawn-foundation (npm)

The package blaze-dotenv-parse-variables-spawn-foundation was found to contain malicious code...

Malicious code in env-variables-extension (npm)

The package env-variables-extension was found to contain malicious code...

MAL-2025-39001 Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm)

The package webdriverio-nucleosynthesis-fork-dotenv-parse-variables was found to contain malicious code...

MAL-2025-19679 Malicious code in env-variables-extension (npm)

The package env-variables-extension was found to contain malicious code...

Malicious code in global-baryon-dotenv-parse-variables-frontend (npm)

The package global-baryon-dotenv-parse-variables-frontend was found to contain malicious code...

Malicious code in dotenv-parse-variables-xanthus-nestjs-playwright (npm)

The package dotenv-parse-variables-xanthus-nestjs-playwright was found to contain malicious code...

Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm)

The package graviton-dactyl-helmet-dotenv-parse-variables was found to contain malicious code...

Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm)

The package dotenv-parse-variables-norma-adonis-duplex was found to contain malicious code...

Malicious code in cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables (npm)

The package cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables was found to contain malicious code...

MAL-2025-18664 Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)

The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...

MAL-2025-23275 Malicious code in interferometry-bootes-gridsome-dotenv-parse-variables (npm)

The package interferometry-bootes-gridsome-dotenv-parse-variables was found to contain malicious code...

MAL-2025-18662 Malicious code in dotenv-parse-variables-neutrino-spinner-higgs (npm)

The package dotenv-parse-variables-neutrino-spinner-higgs was found to contain malicious code...

MAL-2025-15236 Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)

The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...

MAL-2025-18663 Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm)

The package dotenv-parse-variables-norma-adonis-duplex was found to contain malicious code...

CVE-2025-7971

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash...

CVE-2025-7971

CVE-2025-7971 affects Rockwell Automation’s Studio 5000 Logix Designer. The issue arises from unsafe handling of environment variables, where a path without a valid file can cause the application to crash and, in some cases, may allow arbitrary code execution locally. The available connected sour...

httpd: insufficient escaping of user-supplied data in mod_ssl

A vulnerability was found in the Apache HTTP Server. Insufficient escaping of user-supplied data in modssl allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to...

PT-2025-33298 · Rockwell Automation · Studio 5000 Logix Designer

Name of the Vulnerable Software and Affected Versions: Studio 5000 Logix Designer affected versions not specified Description: A security issue exists in Studio 5000 Logix Designer related to unsafe handling of environment variables. When a specified path does not contain a valid file, the softwa...

Rockwell Automation Studio 5000 Logix Designer 安全漏洞

Rockwell Automation Studio 5000 Logix Designer is a Windows-based application from Rockwell Automation, Inc. It is used to build programs for PLCs. A security vulnerability exists in Rockwell Automation Studio 5000 Logix Designer that stems from improper handling of environment variables could...

CVE-2025-8860

A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFIVARSREGBUFFERSIZE, the .write callback uefivarswrite is invoked. The function allocates a heap buffer without zeroing the memory, leaving the buffer filled with residual data from prior allocations. Wh...