18458 matches found
MAL-2025-47516 Malicious code in vault-hux-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...
CVE-2025-21484
creationtimestamp| type| source ---|---|--- 2025-09-24 15:53:07+00:00| seen| Telegram/j2l8d6qe1QrgVFL7uh2A01P1R1oUKtw8we6Q5j5mnTiQWU...
Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2025-9031
creationtimestamp| type| source ---|---|--- 2025-09-24 08:51:38+00:00| seen| Telegram/2Q6hg8sCOLJnllunR2uxdjJCbVbi4ToecJ5LYI9GrXIFYc...
CVE-2025-7414
creationtimestamp| type| source ---|---|--- 2025-09-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-09-24 2025-10-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-10-01 2025-10-02 00:00:00+00:00| seen| The Shadowserver...
Security update for frr
This update for frr fixes the following issues: CVE-2024-55553: excessive resource consumption may lead to denial of service due to repeated RIB revalidation when processing several RPKI updates bsc1235237. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
com.datasqrl:sqrl-discovery (>=0.7.0, <=0.8.7), com.datasqrl:sqrl-planner (>=0.7.0, <=0.8.7) +20 more potentially affected by CVE-2025-59432 via com.ongres.scram:scram-common (>=3.0, <=3.1)
com.ongres.scram:scram-common MAVEN version =3.0, =0.7.0, =0.7.0, =0.7.0, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =0.3.124, =1.0.0.rc1, =3.0, =2.4.0-rc1, =2.4.0-snashot and more Source cves: CVE-2025-59432 Source advisory: MEND:CVE-2025-59432...
CVE-2025-10772: Missing Authentication for Critical Function
A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robotdevices/robots/lekiwiremote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can onl...
PT-2025-39074
🔵 Ammonia, Mutation XSS, CVE-2025-42581 Low https://t.co/YUWArRZLdF...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: blobfuse2, checksec, confluent-common-docker, custom-pod-autoscaler-operator, git-lfs, bank-vaults, shfmt, grafana-operator, vault-k8s, kube-vip-cloud-provider, addon-resizer, gitsign, dagdotdev, sftpgo-plugin-pubsub, k8sgpt-operator, kube-vip,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: blobfuse2, checksec, confluent-common-docker, custom-pod-autoscaler-operator, git-lfs, bank-vaults, shfmt, grafana-operator, vault-k8s, kube-vip-cloud-provider, addon-resizer, gitsign, dagdotdev, sftpgo-plugin-pubsub, k8sgpt-operator, kube-vip,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: openbao-k8s-fips, local-path-provisioner, secrets-store-csi-driver-provider-aws-fips, memcached-exporter-fips, confluent-common-docker, k8sgpt-operator, kubernetes-dashboard-fips, knative-eventing, prometheus-process-exporter, git-lfs, etcd-fips, karpenter-fips,...
BELL-CVE-2025-39842
Bulletin has no description...
SUSE CVE-2025-50100
unknown...
CVE-2025-26516
StorageGRID formerly StorageGRID Webscale versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit could allow an unauthenticated attacker to cause a Denial of Service on the Admin node...
CVE-2025-39838 cifs: prevent NULL pointer dereference in UTF16 conversion
In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer dereference bug here. NULL is passed to cifssfumakenode without checks, which passes it unchecked to cifsstrnduptoutf16, which in turn passes ...
BELL-CVE-2023-53380
Bulletin has no description...
BELL-CVE-2023-53400
Bulletin has no description...
SUSE CVE-2023-53377
In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2compoundop we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress testing with KASAN enabled kernel. Fixin...