6801 matches found
eth: bnxt: always recalculate features after XDP clearing, fix null-deref
...
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
...
wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
...
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: [email protected]" in its release description, is not vulnerable).
...
drm/amd: check num of link levels when update pcie param
...
Linux Distros Unpatched Vulnerability : CVE-2022-50157
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: PCI: microchip: Fix refcount leak in mcpcieinitirqdomains ofgetnextchild returns a node...
Linux Distros Unpatched Vulnerability : CVE-2025-38624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: pnvphp: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unplugged, the pnvphp driver leaked the allocated IRQ...
Vulnerability of the cxl_decoder_release() function in the drivers/cxl/core/bus.c module – The CXL Device Support Driver for Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the cxldecoderrelease function in the drivers/cxl/core/bus.c module – The drivers for supporting CXL devices Compute Express Link in the Linux operating system are vulnerable due to the reutilization of previously released memory. Exploiting this vulnerability could allow an...
Linux Distros Unpatched Vulnerability : CVE-2025-38576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of...
Malicious code in express-prisma (npm)
The package express-prisma was found to contain malicious code...
MAL-2025-41981 Malicious code in express-prisma (npm)
The package express-prisma was found to contain malicious code...
Malicious code in example-hydrogen-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72ac17540d8cc94d193119aebd535f4becbc637bd1942a5b02a51550239e23c8 The OpenSSF Package Analysis project identified 'example-hydrogen-express' @ 10.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2025-41806 Malicious code in example-hydrogen-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72ac17540d8cc94d193119aebd535f4becbc637bd1942a5b02a51550239e23c8 The OpenSSF Package Analysis project identified 'example-hydrogen-express' @ 10.0.1 npm as malicious. It is considered malicious because: - The...
Ubuntu 25.04 : Linux kernel (Azure) vulnerabilities (USN-7721-1)
"The remote Ubuntu 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7721-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in th...
Vulnerabilities of Cisco IOS and IOS XE operating systems, as well as of the Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) micro-programmed network devices, related to writing beyond the buffer in memory, allowing attackers to trigger service interruptions.
Vulnerabilities of Cisco IOS and IOS XE operating systems, as well as of the Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA micro-programmed network devices, are related to writing beyond the buffer boundaries in memory. Exploitation of these vulnerabilities can allo...
Linux Distros Unpatched Vulnerability : CVE-2017-16119
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is...
Linux Distros Unpatched Vulnerability : CVE-2014-6393
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, which...
CVE-2025-38658
In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: Do not complete commands twice if nvmetreqinit fails Have nvmetreqinit and req-execute complete failed commands. Description of the problem: nvmetreqinit calls nvmetreqcomplete internally upon failure, e.g.,...
UBUNTU-CVE-2025-38624
In the Linux kernel, the following vulnerability has been resolved: PCI: pnvphp: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unplugged, the pnvphp driver leaked the allocated IRQ resources for the child bridges' hotplug event notifications, resulting i...
UBUNTU-CVE-2025-38658
In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: Do not complete commands twice if nvmetreqinit fails Have nvmetreqinit and req-execute complete failed commands. Description of the problem: nvmetreqinit calls nvmetreqcomplete internally upon failure, e.g.,...