Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694708 source statements · aliases may refer to the same vulnerabilityMalicious code in availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc (npm)
osv · GHSA-h6f2-vgm7-h826
npm: availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc
Malicious code in availab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzg (npm)
osv · GHSA-qvvf-2f94-wjcv
npm: availab-le-alb-um-zip-101158-the-louder-i-call-the-faster-it-runs-64ggm-khmrzg
Malicious code in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh (npm)
osv · GHSA-56cr-m888-fc3h
npm: alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh
Malicious code in alb-um-availa-ble-zip-mp3-file-31673-finally-1m7lu-usrooy (npm)
osv · GHSA-hrw2-w5q8-g9hp
npm: alb-um-availa-ble-zip-mp3-file-31673-finally-1m7lu-usrooy
Malicious code in availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis (npm)
osv · GHSA-5prx-2cxw-36ph
npm: availab-le-alb-um-zip-38895-crimes-of-passion-oeiro-wmybis
Malicious code in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia (npm)
osv · GHSA-9whp-47wv-mrc7
npm: a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia
Malicious code in availab-le-alb-um-zip-56502-interstellar-space-1qv3j-xsmien (npm)
osv · GHSA-q7pq-g9cc-7jhx
npm: availab-le-alb-um-zip-56502-interstellar-space-1qv3j-xsmien
Malicious code in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz (npm)
osv · GHSA-w86v-7j87-83mw
npm: alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz
Malicious code in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko (npm)
osv · GHSA-f628-82vx-28m8
npm: alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko
Malicious code in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae (npm)
osv · GHSA-m3g8-5822-9cxj
npm: ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae
Malicious code in do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft (npm)
osv · GHSA-x7mr-ccmw-f369
npm: do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft
Malicious code in a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah (npm)
osv · GHSA-ppxc-942p-fmwp
npm: a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah
Malicious code in alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj (npm)
osv · GHSA-6272-chwf-hp6j
npm: alb-um-availa-ble-zip-mp3-file-470287-watch-my-moves-2zscf-aatbzj
Malicious code in a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb (npm)
osv · GHSA-3fvj-6mgp-wj9r
npm: a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb
Malicious code in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj (npm)
osv · GHSA-mwmg-876h-ff26
npm: avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj
Malicious code in a-vailable-al-bum-file-19105-filles-de-kilimanjaro-4syt9-khnipp (npm)
osv · GHSA-96xx-j42j-vv4v
npm: a-vailable-al-bum-file-19105-filles-de-kilimanjaro-4syt9-khnipp
Malicious code in ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck (npm)
osv · GHSA-qxwc-4fmm-84mg
npm: ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck
Malicious code in availab-le-alb-um-zip-hope-for-men-wmh1o-fjstib (npm)
osv · GHSA-wp5w-9ccf-xg93
npm: availab-le-alb-um-zip-hope-for-men-wmh1o-fjstib
Malicious code in alb-um-availa-ble-zip-mp3-file-43857-green-light-mrpup-qmtshy (npm)
osv · GHSA-6gr5-xmf3-p56w
npm: alb-um-availa-ble-zip-mp3-file-43857-green-light-mrpup-qmtshy
Malicious code in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd (npm)
osv · GHSA-3qj4-63f8-j79f
npm: ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd
Malicious code in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy (npm)
osv · GHSA-g38m-69hw-j6vq
npm: availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy
Malicious code in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt (npm)
osv · GHSA-cccj-f4r4-ff28
npm: a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt
Malicious code in a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk (npm)
osv · GHSA-c28g-9354-cxff
npm: a-vailable-al-bum-file-36850-other-peoples-lives-vys1z-fuucqk
Malicious code in a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids (npm)
osv · GHSA-gh7w-f38w-p962
npm: a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids
Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm)
osv · GHSA-4hvj-qfjg-3fr5
npm: do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon
Malicious code in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd (npm)
osv · GHSA-59hh-hxgx-22hj
npm: down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd
Malicious code in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv (npm)
osv · GHSA-575p-j37f-vjhr
npm: down-load-available-zip-now-265533-the-safeway-elhem-xoyofv
Malicious code in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg (npm)
osv · GHSA-26fv-xj33-9v83
npm: down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg
Malicious code in down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv (npm)
osv · GHSA-92jm-7q3v-h86x
npm: down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv
Malicious code in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh (npm)
osv · GHSA-vq9x-h952-px7p
npm: down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh
Malicious code in do-wnload-available-f2oap-wvzhe9 (npm)
osv · GHSA-rvh7-vx3v-774p
npm: do-wnload-available-f2oap-wvzhe9
Malicious code in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp (npm)
osv · GHSA-45c7-vgrw-9898
npm: do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp
vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload
cve-program ·
Vendor product: Criminal-Management-System
sqlparse through 0.6.0 PHP Code Injection via output_format='php'
cve-program ·
https://pypi.org: sqlparse
ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)
cve-program ·
Vendor product: zoneminder
Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMS
cve-program ·
Vendor product: hrms
Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`
cve-program ·
Vendor product: arcane
RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection
cve-program ·
Vendor product: Retrieval-based-Voice-Conversion-WebUI
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.