13378 matches found
UBUNTU-CVE-2025-38531
In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...
CVE-2025-38542 net: appletalk: Fix device refcount leak in atrtr_create()
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtrcreate When updating an existing route entry in atrtrcreate, the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix...
CVE-2025-38531
In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...
CVE-2025-38531
In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions dev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...
CVE-2025-38521
creationtimestamp| type| source ---|---|--- 2025-08-16 11:03:07+00:00| seen| Telegram/AxdvAwgoFo8NoOiv12Q1WX0RStPYIIV95nLVE0mHCgSzX0E 2026-01-22 19:23:42+00:00| seen| Telegram/dDrS7jCx1-mbfF1VtTC0R8fbNPtLvry3cEYGmZ-V5HVE0...
WordPress weichuncai(WP伪春菜) plugin <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin weichuncaiWP伪春菜 versions = 1.5...
CVE-2011-10013
Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php...
Malicious code in @capacitor-bmo/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73144f96ecbe009cff465503e7a7c8d70408d0a85196d3b8faefbd6809a731e8 The OpenSSF Package Analysis project identified '@capacitor-bmo/common' @ 99.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2025-6884 Malicious code in @capacitor-bmo/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73144f96ecbe009cff465503e7a7c8d70408d0a85196d3b8faefbd6809a731e8 The OpenSSF Package Analysis project identified '@capacitor-bmo/common' @ 99.0.1 npm as malicious. It is considered malicious because: - The...
CVE-2025-1929
CVE-2025-1929 concerns an SQL injection in Reel Sektör Hazine ve Risk Yönetimi Yazılımı (Risk Yazılım Teknolojileri Ltd. Şti.) through version 1.0.0.4. The issue is described as improper neutralization of special elements used in an SQL command, i.e., a blind SQL injection (CAPEC-7). Connected so...
CVE-2025-7778
creationtimestamp| type| source ---|---|--- 2025-08-15 09:01:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwgil7fvjt2s 2025-08-15 12:07:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwgsxga4472g...
Linux Distros Unpatched Vulnerability : CVE-2020-25635
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ansible Base when using the awsssm connection plugin as garbage collector is not happening after playbook run is completed. Files would rema...
Linux Distros Unpatched Vulnerability : CVE-2021-46955
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernel...
Linux Distros Unpatched Vulnerability : CVE-2022-50041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: Fix call trace with null VSI during VF reset During stress test with attaching and...
Malicious code in @adzu/common (npm)
The package @adzu/common was found to contain malicious code...
Malicious code in csf-web-common (npm)
The package csf-web-common was found to contain malicious code...
Malicious code in bartok-common (npm)
The package bartok-common was found to contain malicious code...
Malicious code in vbs-common (npm)
The package vbs-common was found to contain malicious code...