11045 matches found
Malicious code in findomestic-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a944111d653908b4d57be5f92681aa2954a42a4ddea0169b05c3aca65a7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @visma-spcs-registry/react-common-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2022-49701
In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Allocate/free queue resource only during probe/remove Currently, the sub-queues and event pool resources are allocated/freed for every CRQ connection event such as reset and LPM. This exposes the driver to a couple...
CVE-2022-49166
In the Linux kernel, the following vulnerability has been resolved: ntfs: add sanity check on allocation size ntfsreadinodemount invokes ntfsmallocnofs with zero allocation size. It triggers one BUG in the ntfsmalloc function. Fix this by adding sanity check on ni-attrlistsize...
Recommended update for Maven
This update for Maven fixes the following issues: maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: Key changes across versions: Bug fixes and improved support of dynamic types Dependency upgrades ASM, Maven core, and notably the removal of commons-io Improved error handling by...
products of the LLC Data Compromise
The vulnerability of the software products developed by LLC “NPO ‘MIR’ is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities could allow attackers who operate remotely to compromise the confidentiality, integrity, and accessibility of the...
CVE-2025-26598
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...
CVE-2025-26601
A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...
GHSA-CRQM-PWHX-J97F vulnerabilities
Vulnerabilities for packages: neuvector-fips, cert-manager-cmctl, multus-cni-fips, wave-fips, crossplane-provider-azure-sql, fscrypt, opentelemetry-collector-contrib-fips, atlantis, newrelic-fluent-bit-output, kubevela, crossplane-provider-gcp, dynamic-localpv-provisioner-fips, loki, lazygit,...
Medium: virtuoso-opensource
Issue Overview: An issue in the chasharray component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements. CVE-2024-57635 An issue in the itcsamplerowcheck component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a...
OSV-2025-162 Heap-buffer-overflow in snmp_in_options
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398067543 Crash type: Heap-buffer-overflow READ 8 Crash state: snmpinoptions netsnmpparseargs snmpparseargsfuzzer.c...
Linux x86/mm kernel DoS
The vulnerability of x86/mm kernel components of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Linux kernel mlx5 DoS
The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux DRM MSM DPU DoS
The vulnerability of DRM/MSM/DPU components in Linux operating systems is related to memory leaks. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel md/raid DoS
The vulnerability of Linux operating system’s md/raid kernel components is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux DoS
The vulnerability of DRM/amdgpu/PM components in the Linux operating system is related to pointer aliasing. Exploiting this vulnerability can allow a hacker to trigger a service failure...
Vulnerabilities fixed in IBM Cognos Controller
IBM has fixed vulnerabilities in IBM Cognos Controller Versions 11.0.0 to 11.0.1 FP3 and 11.1.0. The vulnerabilities allow a malicious person to perform attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Cross-Site-Scripting XSS. - Circumvention of a security...
mysql: Components Services unspecified vulnerability (CPU Jan 2025)
A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...
mysql: Components Services unspecified vulnerability (CPU Jan 2025)
A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...