29 matches found
CVE-2026-68454
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...
CVE-2026-68454
CVE-2026-68454: In the Linux kernel KVM for s390, the PCI handling of AIF enable without AISB is fixed. When a guest registers IRQs without a summary bit, the GAITE now stores 0 for the guest AISB location instead of using virt_to_phys(page_address(NULL)). This renormalizes AISB location handling...
CVE-2026-68454 KVM: s390: pci: Fix handling of AIF enable without AISB
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...
CVE-2026-68454
In the Linux kernel, the following vulnerability has been resolved: K...
CVE-2023-29111
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
Malicious code in asta-aif-dak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ccc7f04a6b136cdf61e12d99b224851cfcb14a78bb6f550026703a3886a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-181580 Malicious code in asta-aif-dak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ccc7f04a6b136cdf61e12d99b224851cfcb14a78bb6f550026703a3886a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138029
Malicious code in asta-aif-dak npm...
EUVD-2025-134568
Malicious code in kisut-afncg-aif npm...
EUVD-2025-134569
Malicious code in kisut-afncg-aif npm...
Malicious code in nuilva-darde-aif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b2bf4b178ccc3bb1fae074e6347fef85448edf6e9f8923b22b87a1ae5e8c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-139464
Malicious code in nuilva-darde-aif npm...
Malicious code in nuyar-mar-aif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab6ffa2bcaebe34ba11381ba48619f1c9b452408316f3deaef4893482302d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-139015
Malicious code in poglymer-ogaih-aif npm...
EUVD-2025-139061
Malicious code in nuyar-mar-aif npm...
EUVD-2023-32714
Malicious code in bioql PyPI...
CVE-2023-23450
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via...
CVE-2023-29111
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
CVE-2023-29111
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
Design/Logic Flaw
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...