10795 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-49921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents...
CVE-2025-38511
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...
CVE-2025-38511
In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might...
CVE-2025-48861
A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
Linux Distros Unpatched Vulnerability : CVE-2022-48937
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring: add a schedule point in ioaddbuffers Looping 65535 times doing kmalloc calls can...
Linux Distros Unpatched Vulnerability : CVE-2024-26787
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIGDMAAPIDEBUGSG...
CVE-2025-55165
Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database. Prior to version 0.8.3, the debug pack generated by Autocaliweb can expose sensitive configuration data, including API keys. This occurs because the todict method, used ...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
Malicious code in bash-good-zero-old-debug (npm)
The package bash-good-zero-old-debug was found to contain malicious code...
Malicious code in debug-await-transpile-final-authorize (npm)
The package debug-await-transpile-final-authorize was found to contain malicious code...
Malicious code in deploy-assert-debug-short-reject (npm)
The package deploy-assert-debug-short-reject was found to contain malicious code...
Malicious code in fast-cloud-mu-debug-sandbox (npm)
The package fast-cloud-mu-debug-sandbox was found to contain malicious code...
Malicious code in interface-cloud-class-benchmark-debug (npm)
The package interface-cloud-class-benchmark-debug was found to contain malicious code...
Malicious code in local-debug (npm)
The package local-debug was found to contain malicious code...
Malicious code in epsilon-scale-error-debug-container (npm)
The package epsilon-scale-error-debug-container was found to contain malicious code...
MAL-2025-33440 Malicious code in small-debug-awk-hash-parse (npm)
The package small-debug-awk-hash-parse was found to contain malicious code...