SUSE CVE-2022-49793

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for name, it need be freed when deviceadd fails, call putdevice to give up the reference that hold in deviceinitialize, so that it can ...

SUSE CVE-2022-49836

In the Linux kernel, the following vulnerability has been resolved: siox: fix possible memory leak in sioxdeviceadd If deviceregister returns error in sioxdeviceadd, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give up the reference...

SUSE CVE-2022-49926

In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsaloopinit kmemleak reported memory leaks in dsaloopinit: kmemleak: 12 new suspected memory leaks unreferenced object 0xffff8880138ce000 size 2048: comm "modprobe", pid 390, jiffies...

Gen Digital Avast Cleanup Premium 安全漏洞

Gen Digital Avast Cleanup Premium is an advanced PC cleanup and optimization tool from Gen Digital, Inc. with deep junk cleaning and automated maintenance features. A security vulnerability exists in Gen Digital Avast Cleanup Premium version 24.2.16593.17810, which stems from a mishandling of...

PT-2025-20565

Name of the Vulnerable Software and Affected Versions Avast Cleanup Premium version 24.2.16593.17810 Description The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to clear the dmaiommu flag during iommu cleanup, which could lead to abnormal subsequent operation...

The vulnerability in the cleanupTransaction() function of the fs/btrfs/transaction.c module of the btrfs file system support module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cleanupTransaction function in the fs/btrfs/transaction.c module of the btrfs file system support in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-20564 · Avast · Avast Cleanup Premium

Name of the Vulnerable Software and Affected Versions: Avast Cleanup Premium version 24.2.16593.17810 Description: The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use...

PT-2025-20514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the cleanup of FDB, MDB, and VLAN entries on unbind. The issue arises from the assumption that higher layers have balanc...

The vulnerability of the Linux operating system’s kernel, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from file locks not being handled correctly in the ivpumscleanup function, which could lead to a deadlock...

Gen Digital Avast Cleanup Premium 安全漏洞

Gen Digital Avast Cleanup Premium is an advanced PC cleanup and optimization tool from Gen Digital, Inc. with deep junk cleaning and automated maintenance features. A security vulnerability exists in Gen Digital Avast Cleanup Premium version 24.2.16593.17810, which stems from a mishandling of...

The vulnerability affects the FSM component of the software used for traffic management, load balancing, and security protection in BIG-IP Next Service Proxy for Kubernetes (SPK), as well as the access control and remote authentication mechanisms in BIG-IP. This allows attackers to cause service failures.

The vulnerability of the fsm component in BIG-IP Next Service Proxy for Kubernetes SPK, as well as in tools for access control and remote authentication, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

phpList 安全漏洞

phpList is a fully featured open source email marketing manager from phpList Open Source for creating, sending, integrating and analyzing email campaigns and newsletters. A security vulnerability exists in versions prior to phpList 3.6.3 that stems from improper input cleanup and could lead to a...

WordPress plugin Contest Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin NEX-Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

linux-firmware security update

An update is available for linux-firmware. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linux-firmware packages contain all of the firmware files that are...

Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2022-49819

In the Linux kernel, the following vulnerability has been resolved: octeonep: fix potential memory leak in octepdevicesetup When occur unsupporteddev and mbox init errors, it did not free oct-conf and iounmap oct-mmioi.hwaddr. That would trigger memory leak problem. Add kfree for oct-conf and...

SUSE CVE-2022-49821

In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDNdspelementregister Afer commit 1fa5ae857bb1 "driver core: get rid of struct device's busid string array", the name of device is allocated dynamically, use putdevice to give up the reference...