45088 matches found
PT-2025-34707 · Unknown · Scratch Channel
Name of the Vulnerable Software and Affected Versions: The Scratch Channel versions 1 and 1.1 Description: The Scratch Channel, a news website, is susceptible to unauthorized article posting. A POST request to the article publishing endpoint allows posting articles in any category with any date,...
SUSE: Security Advisory (SUSE-SU-2025:02954-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4281-1 iperf3 - security update
Bulletin has no description...
DLA-4280-1 unbound - security update
Bulletin has no description...
Debian dla-4281 : iperf3 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4281 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4281-1 [email protected]...
DSA-5984-1 thunderbird - security update
Bulletin has no description...
MAL-2025-41324 Malicious code in rush-cyclic-dep-1 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc3b2fad762b8091211ef41ee84b4321f34789e8957982339cb99ad5c439f9bf The OpenSSF Package Analysis project identified 'rush-cyclic-dep-1' @...
Malicious code in rush-cyclic-dep-1 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc3b2fad762b8091211ef41ee84b4321f34789e8957982339cb99ad5c439f9bf The OpenSSF Package Analysis project identified 'rush-cyclic-dep-1' @...
GCVE-1-2025-0003
creationtimestamp| type| source ---|---|--- 2025-08-23 08:33:46+00:00| seen| https://social.circl.lu/users/cedric/statuses/115077154461679389...
PT-2025-34547
Name of the Vulnerable Software and Affected Versions: StorageGRID versions prior to 11.8.0.15 StorageGRID versions prior to 11.9.0.8 Description: StorageGRID is susceptible to a privilege escalation issue. A successful exploit could allow an unauthorized, authenticated attacker to discover Grid...
AZL-66590 CVE-2025-38671 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but doesn't jump out of the loop if the bus is kept active by a client. This is not expected. A malicious or buggy i2c client can hang th...
AZL-66587 CVE-2025-38665 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: can: netlink: canchangelink: fix NULL pointer deref of struct canpriv::dosetmode Andrei Lalaev reported a NULL pointer deref when a CAN device is restarted from Bus Off and the driver does not implement the struct...
AZL-66653 CVE-2025-38643 affecting package kernel for versions less than 6.6.119.3-1
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...
AZL-66638 CVE-2025-38635 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davincilpscclkregister devmkasprintf returns NULL when memory allocation fails. Currently, davincilpscclkregister does not check for this case, which results in a NULL pointer dereference. Add NULL...
AZL-66614 CVE-2025-38626 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fsmapblocks in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system panic as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2835! Call Trace:...
AZL-73479 CVE-2025-38630 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref fbaddvideomode can fail with -ENOMEM when its internal kmalloc cannot allocate a struct fbmodelist. If that happens, the modelist stays empty but the driver continues t...
AZL-73611 CVE-2025-38617 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packetsetring and packetnotifier When packetsetring releases po-bindlock, another thread can run packetnotifier and process an NETDEVUP event. This race and the fix are both similar to that of commit...
Fedora 43 : docker-buildx (2025-f2bcb1f99e)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f2bcb1f99e advisory. Automatic update for docker-buildx-0.27.0-1.fc43. Changelog Wed Aug 20 2025 Bradley G Smith - 0.27.0-1 - Update to release v0.27.0 - Resolves: rhvz2388453,...
SUSE SLES15 Security Update : kernel (Live Patch 52 for SLE 15 SP3) (SUSE-SU-2025:02955-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02955-1 advisory. This update for the Linux Kernel 5.3.18-15030059188 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: cor...