8855 matches found
SUSE CVE-2025-38542
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtrcreate When updating an existing route entry in atrtrcreate, the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix...
CVE-2025-53631
flaskBlog is a blog app built with Flask. In versions 2.8.1 and prior, improper sanitization of postContent when submitting POST requests to /createpost leads to arbitrary JavaScript execution XSS on all pages the post is reflected on including /, /post/ID, /admin/posts, and /user/ID of the user...
AZL-66356 CVE-2025-38542 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtrcreate When updating an existing route entry in atrtrcreate, the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix...
UBUNTU-CVE-2025-38542
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtrcreate When updating an existing route entry in atrtrcreate, the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix...
CVE-2025-38523
CVE-2025-38523 affects the Linux kernel CIFS/SMB client path. The issue stems from the smbd_response slab’s packet trailer not being marked as allowed for usercopy, causing kernel memory exposure checks in copy_to_iter() to trip when HARDENED_USERCOPY is enabled. The fix is in the kernel by confi...
CVE-2025-38523
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...
Linux Distros Unpatched Vulnerability : CVE-2023-53005
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: traceeventshist: add check for return value of 'createhistfield' Function 'createhistfield' ...
Linux Distros Unpatched Vulnerability : CVE-2025-38456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmicreateuser The intf...
Linux Distros Unpatched Vulnerability : CVE-2025-38171
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handling in probe The createsinglethreadworkque...
Malicious code in @zalastax/nolb-create-r (npm)
The package @zalastax/nolb-create-r was found to contain malicious code...
Malicious code in create-temp-dir (npm)
The package create-temp-dir was found to contain malicious code...
Malicious code in create-shop-mini (npm)
The package create-shop-mini was found to contain malicious code...
Malicious code in create-y (npm)
The package create-y was found to contain malicious code...
MAL-2025-17662 Malicious code in create-planning-file-from-airtable (npm)
The package create-planning-file-from-airtable was found to contain malicious code...
Malicious code in create-release-hash (npm)
The package create-release-hash was found to contain malicious code...
MAL-2025-17666 Malicious code in create-temp-dir (npm)
The package create-temp-dir was found to contain malicious code...
Malicious code in @ginger-dev/create (npm)
The package @ginger-dev/create was found to contain malicious code...
Malicious code in @zalastax/nolb-create-x (npm)
The package @zalastax/nolb-create-x was found to contain malicious code...