fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()

...

Linux Distros Unpatched Vulnerability : CVE-2024-8384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could hav...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Aug-2025 Release 1, which stems from improper export of Android...

CVE-2025-8524

The CVE-2025-8524 entry concerns Boquan DotWallet App 2.15.2 on Android, with an issue in the AndroidManifest.xml of component com.boquanhash.dotwallet leading to improper export of Android components. The vulnerability is locally exploitable and has public disclosures; multiple connected sources...

aap-gateway: CSRF origin checking is disabled

A flaw was found in the Ansible aap-gateway. Cross-site request forgery CSRF origin checking is not done on requests from the gateway to external components, such as the controller, hub, and eda...

CVE-2025-8512 TVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components

A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component hk.com.tvb.bigbigshop. The manipulation leads to improper export of android application...

CVE-2025-8512

CVE-2025-8512 affects TVB Big Big Shop App v2.9.0 on Android. The issue stems from improper handling of the AndroidManifest.xml in the component hk.com.tvb.bigbigshop, causing improper export of Android application components. Local-access exploitation is required; the exploit has been publicly d...

PT-2025-31789 · Tvb · Tvb Big Big Shop App

Name of the Vulnerable Software and Affected Versions: TVB Big Big Shop App version 2.9.0 Description: A problematic vulnerability has been identified in the TVB Big Big Shop App for Android. The issue involves improper export of Android application components due to unknown processing of the...

Caixin News App 安全漏洞

Caixin News App is a news app application from China Caixin Caixin News. A security vulnerability exists in Caixin News App version 8.0.1, which originates from an improper export of Android application components due to misuse of the file AndroidManifest.xml in the component com.caixin.news...

MAL-2025-6672 Malicious code in pwm-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b2e15f6e6b7534b482968389ad8ac756c1e7ee890da069465e9ff1387882694 The OpenSSF Package Analysis project identified 'pwm-components' @...

Malicious code in pwm-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b2e15f6e6b7534b482968389ad8ac756c1e7ee890da069465e9ff1387882694 The OpenSSF Package Analysis project identified 'pwm-components' @...

Malicious code in @sequoia-engineering/eureka-components (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6394 Malicious code in @sequoia-engineering/eureka-components (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM i is affected by multiple vulnerabilities in International Components for Unicode (ICU) option 39 [CVE-2017-14952 CVE-2011-4599 CVE-2017-17484].

Summary International Components for Unicode ICU is a C and C++ library that provides Unicode services used for writing global applications in ILE programming languages. IBM i licensed program option 39 International Components for Unicode is currently built using ICU4C version 4.0. This version...

Ubuntu: Security Advisory (USN-7683-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-6736 Malicious code in mpesa-ui-components (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in mpesa-ui-components (npm)

The package communicates with a domain associated with malicious activity...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: docker-compose, zarf, wolfictl, apko, docker-cli-buildx-fips, trivy-fips, elastic-agent, openfga-fips, cadvisor-fips, buildkitd, chainctl, grype, buildkitd-fips, cadvisor, syft, falcoctl-fips, grype-fips, openfga, opentelemetry-collector-contrib, nerdctl, spire-serve...

RHSA-2025:12280 Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

Bulletin has no description...

Important: Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

An update for jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Comm...