CVE-2025-49489

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux conmgr components allows Resource Leak Exposure. This vulnerability is associated with program files conmgr/dialertask.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

VulnCheck KEV: CVE-2025-29891

Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 before 4.8.5, from 3.10.0 before 3.22.4. Users are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS and 3.22.4 for 3.x releases. This vulnerability is...

CVE-2025-49489

CVE-2025-49489 concerns ASR Falcon_Linux, Kestrel, and Lapwing_Linux (con_mgr components) on Linux. The vulnerability is an improper Resource Shutdown/Release that leads to a Resource Leak Exposure in the dialer_task.C file. Affected versions are Falcon_Linux, Kestrel, and Lapwing_Linux before v1...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Malicious code in online-learning-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1edfb9c66a33f5e0185fe0ee1fb376f5a4f7974933a07e53f9e23d3281d4fe83 Any computer that has this package installed or running should be considered...

Malicious code in styled-components-react18-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66d52b4bf89a840fc85060c046eff8faa5d258a0e3d47a52abf3c7b522ca1762 Any computer that has this package installed or running should be considered...

MAL-2025-5462 Malicious code in styled-components-react18-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66d52b4bf89a840fc85060c046eff8faa5d258a0e3d47a52abf3c7b522ca1762 Any computer that has this package installed or running should be considered...

MGASA-2025-0194 Updated yarnpkg packages fix security vulnerabilities

CVE-2024-37890 yarnpkg: denial of service when handling a request with many HTTP headers. CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification. CVE-2024-12905 yarnpkg: link following and path traversal via maliciously crafted tar file And other vulnerabilities in...

Can One Safety Loop Guard Them All? Agentic Guard Rails for Federated Computing

We propose Guardian-FC, a novel two-layer framework for privacy preserving federated computing that unifies safety enforcement across diverse privacy preserving mechanisms, including cryptographic back-ends like fully homomorphic encryption FHE and multiparty computation MPC, as well as statistic...

Malicious code in handelsblatt-hypesignals-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1041cb10e755d31aaf87160a55cd21a723840476f966117b7895256ef06ae13e Any computer that has this package installed or running should be considered...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows a hacker to cause a service failure.

Vulnerability of the MySQL Cluster component: General database management systems related to MySQL Cluster are vulnerable to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

[SECURITY] Fedora 42 Update: python-setuptools-74.1.3-7.fc42

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

NVIDIA NVDebug tool 安全漏洞

NVIDIA NVDebug tool is a debugging tool from NVIDIA. A security vulnerability exists in NVIDIA NVDebug tool, which stems from a vulnerability that could allow an attacker to access restricted components, which could lead to information disclosure...

Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

MAL-2025-5004 Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

TencentOS Server 4: java-11-konajdk (TSSA-2024:0587)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0587 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: spqr, libnvidia-container, flannel-cni-plugin, velero-plugin-for-aws, cargobump, crossplane-provider-sql, rancher-system-agent, stern, dex, kbld, docker-credential-ecr-login, terraform-provider-time, nri-memcached, gogatekeeper, hubble-ui, falco-exporter,...