5093 matches found
CVE-2025-64529 SpiceDB's WriteRelationships fails silently if payload is too big
SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the exclusion operator somewhere in their authorization schema; have configured their SpiceDB server such that...
Malicious code in db-aggregator-api (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 aed54ed734902c1a5749b7861e2ad95cc2d8c71c78fa4b0167499f9a1b296f9f Importing the module downloads and starts an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-191713 Malicious code in db-aggregator-api (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 aed54ed734902c1a5749b7861e2ad95cc2d8c71c78fa4b0167499f9a1b296f9f Importing the module downloads and starts an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
GHSA-CGRX-MC8F-2PRM vulnerabilities
Vulnerabilities for packages: skopeo-fips, prometheus-podman-exporter, zarf, virt-handler, k8s-device-plugin-fips, newrelic-infrastructure-agent-fips, spegel, blob-csi-fips, eks-distro-fips, grafana-alloy-fips, nerdctl-fips, cni-plugins-fips, datadog-agent, cloudbeat-fips, mesosphere-vsphere-csi,...
CVE-2025-52881 vulnerabilities
Vulnerabilities for packages: skopeo-fips, prometheus-podman-exporter, zarf, virt-handler, k8s-device-plugin-fips, newrelic-infrastructure-agent-fips, spegel, blob-csi-fips, eks-distro-fips, grafana-alloy-fips, nerdctl-fips, cni-plugins-fips, datadog-agent, cloudbeat-fips, mesosphere-vsphere-csi,...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990613)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990613 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989669)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989669 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989829)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989829 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990134)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990134 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...
RHEL 9 : galera and mariadb (RHSA-2025:19584)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19584 advisory. Galera is a fast synchronous multimaster wsrep provider replication engine for transactional databases and similar applications. For more...
GHSA-7WWX-XJ66-R44X vulnerabilities
Vulnerabilities for packages: git-credential-oauth, ko, bom, cluster-api-provider-vsphere, fscrypt, kubernetes-dashboard-web, sonobuoy, docker-machine-driver-harvester, kapp, nova, cluster-proportional-autoscaler, mongodb-kubernetes-operator, litefs, kubernetes-csi-livenessprobe,...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-49903)
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits syzbot reported ================================================================== BUG: KASAN: slab-use-after-free in mutexlockcommon kernel/locking/mutex.c:587 inline BUG: KASAN: slab-use-after-free in...
Oracle MySQL Server 8.4.x < 8.4.7 (October 2025 CPU)
The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and...
DEBIAN-CVE-2022-50567
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...
CVE-2022-50567
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...
UBUNTU-CVE-2022-50567
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...
CVE-2022-50567 fs: jfs: fix shift-out-of-bounds in dbAllocAG
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...
CVE-2022-50567
CVE-2022-50567 affects the Linux kernel, specifically the JFS filesystem in function dbAllocAG. The crash arises from a shift-out-of-bounds due to missing validation of bmp->db_agl2size (can exceed 64). The fix adds a check in dbMount and enforces an upper bound (L2MAXL2SIZE − L2MAXAG); this r...
