1752 matches found
CVE-2025-66552
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...
CVE-2025-11726 Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.9.4. This is due to insufficient capability checks in the REST API endpoints under the 'fl-controls/v1' namespace that control site-wide Global Presets...
CVE-2025-64345
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...
EUVD-2025-124918
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release If streamon/streamoff calls are imbalanced, such as when exiting an application with Ctrl+C when streaming, the m2m usagecount will never reach zero and the ISI channel...
UBUNTU-CVE-2025-40165
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release If streamon/streamoff calls are imbalanced, such as when exiting an application with Ctrl+C when streaming, the m2m usagecount will never reach zero and the ISI channel...
EUVD-2025-77931
Malicious code in widemolluskz3n npm...
Malicious code in wide_mollusk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63be89c0337e8590fd689695161145916d18c9cfb1a51219cb62de6056479bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80044
Malicious code in widecaterpillar0xrequest npm...
EUVD-2025-83431
Malicious code in wideparrotz3n npm...
EUVD-2025-60927
The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the register and savenft methods with only a...
Malicious code in wide_chickadee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff950a1efb0d042e3605a8a3aa34985f357ca80d627407e482e5067be0fb46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51075
Malicious code in wide-black-narwhal npm...
Malicious code in wide-gray-iguana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f9f46ab17a8725e6c2a214416a6503e882a9727e0bf0129ba42a11edd9337f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51073
Malicious code in wide-gray-iguana npm...
Malicious code in wide-black-narwhal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55392b535862c6ed90e2e9d1c91c276c997a843b931e069d2989c0c5c39573e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51074
Malicious code in wide-blush-yak npm...
MAL-2025-71576 Malicious code in wide-gray-iguana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f9f46ab17a8725e6c2a214416a6503e882a9727e0bf0129ba42a11edd9337f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71574 Malicious code in wide-black-narwhal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55392b535862c6ed90e2e9d1c91c276c997a843b931e069d2989c0c5c39573e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wide_narwhal_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad96e9dc04c06f08d622f6886ad55fac504cea503a02e4c22a2fb75267f3f315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...