13698 matches found
EUVD-2025-124939
In the Linux kernel, the following vulnerability has been resolved: nvdimm: ndtest: Return -ENOMEM if devmkcalloc fails in ndtestprobe devmkcalloc may fail. ndtestprobe allocates three DMA address arrays dcrdma, labeldma, dimmdma and later unconditionally uses them in ndtestnvdimminit, which can...
Security Bulletin: IBM QRadar SIEM is affected by improper storage of credentials in configuration files
Summary IBM QRadar SIEM is affected by improper storage of credentials in configuration files in source control. IBM has addressed the issue in the latest update. Vulnerability Details CVEID:CVE-2025-33119 DESCRIPTION: IBM QRadar SIEM stores user credentials in configuration files in source contr...
CVE-2025-40176
creationtimestamp| type| source ---|---|--- 2025-11-12 12:00:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gm3cwbw32n 2025-11-12 14:01:47+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsstockzu2 2026-04-02 17:00:00+00:00| seen|...
DEBIAN-CVE-2025-40162
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdwutils: avoid NULL deref when devmkasprintf fails devmkasprintf may return NULL on memory allocation failure, but the debug message prints cpus-dainame before checking it. Move the devdbg call after the NULL check to...
CVE-2025-40127
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...
EUVD-2025-117479
Malicious code in common-coffee-loon npm...
EUVD-2025-106033
Malicious code in commonfoxz3n npm...
CVE-2025-64432
KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...
CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-24299
Intel CIP software prior to version WIN_DCA_2.4.0.11001 has an input validation error in Ring 3: User Applications that may allow an escalation of privilege. An unprivileged adversary with an authenticated user and low attack complexity could exploit this, potentially over the network, to impact ...
DEBIAN-CVE-2025-13020
Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...
CVE-2025-11697
creationtimestamp| type| source ---|---|--- 2025-11-11 16:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ejqkfm362x 2025-11-11 17:41:16+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eomab2j2z2 2025-11-11 18:10:19+00:00| seen|...
EUVD-2025-92701
Malicious code in commonbasiliskz3n npm...
MAL-2025-113183 Malicious code in common_basilisk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270bf809cfa32b7fa6595fd5b47af0722a34055655fd43f6f4c824412c4c60fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-100720 Malicious code in common_lungfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8ebd43c1eb20b2c079581955cd9f86a036523e2f77c0f1e939cda7e6f17dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79598
Malicious code in commongalliformz3n npm...
EUVD-2025-82446
Malicious code in commonmarmoset0xrequest npm...
MAL-2025-100724 Malicious code in common_woodpecker_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f5e662de13ab10d957610060fe4fbcb3d545029c40d416ba91691026cbe644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...