250 matches found
CVE-2020-12407
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content. This vulnerability affects Firefox 77...
Unsound APIs of public `constant::Reader` and `StructSchema`
The safe API functions constant::Reader::get and StructSchema::new rely on PointerReader::getrootunchecked, which can cause undefined behavior UB by constructing arbitrary words or schemas. Reader::get rust pub fn get&self - Result::Reader // ... // UNSAFE: access words without validation...
UBUNTU-CVE-2025-40355
In the Linux kernel, the following vulnerability has been resolved: sysfs: check visibility before changing group attribute ownership Since commit 0c17270f9b92 "net: sysfs: Implement isvisible for physportid, portname, switchid", devchangenetnamespace can hit WARNON when trying to change owner of...
CVE-2025-40355
In the Linux kernel, the following vulnerability has been resolved: sysfs: check visibility before changing group attribute ownership Since commit 0c17270f9b92 "net: sysfs: Implement isvisible for physportid, portname, switchid", devchangenetnamespace can hit WARNON when trying to change owner of...
CVE-2025-40355 sysfs: check visibility before changing group attribute ownership
In the Linux kernel, the following vulnerability has been resolved: sysfs: check visibility before changing group attribute ownership Since commit 0c17270f9b92 "net: sysfs: Implement isvisible for physportid, portname, switchid", devchangenetnamespace can hit WARNON when trying to change owner of...
CVE-2025-59802
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups OCG are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamical...
CVE-2025-47220
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLESIGNATURECUSTOMIMAGEPATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an...
EUVD-2025-94170
Malicious code in visibledamselflyz3n npm...
EUVD-2025-94167
Malicious code in visiblehamsterz3n npm...
EUVD-2025-94171
Malicious code in visiblealbatrossz3n npm...
Malicious code in visible_pheasant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9b082b3dd1e26e6cd72a55f93d9d2bf6c1643b22637d7baef7c7997b000384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-87959
Malicious code in visiblepheasantz3n npm...
MAL-2025-117925 Malicious code in visible_pheasant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9b082b3dd1e26e6cd72a55f93d9d2bf6c1643b22637d7baef7c7997b000384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75270
Malicious code in visiblemosquito-notthedevs npm...
EUVD-2025-77972
Malicious code in visiblecentipedez3n npm...
EUVD-2025-62090
Malicious code in visibleplatypusz3n npm...
EUVD-2025-62091
Malicious code in visibleearthwormz3n npm...
EUVD-2025-51188
Malicious code in visible-rose-camel npm...