UBUNTU-CVE-2025-22874

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon...

Malicious code in email-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4c79355714fdd4b93c7a36e4f249eee1ce00120cb74835c536968d2b6a2e3ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4825 Malicious code in email-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4c79355714fdd4b93c7a36e4f249eee1ce00120cb74835c536968d2b6a2e3ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerability of components of Linux operating system’s kernel, net/smc, allowing a hacker to trigger a service failure

The vulnerability of the net/smc components in Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted data with parameters such as v2extoffset, eidcnt, and ismgidcnt...

MAL-2025-4596 Malicious code in ext-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14959c108b475b81cfdf99aa56c08c7118e686e50a188e9af0251a8fb780e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14959c108b475b81cfdf99aa56c08c7118e686e50a188e9af0251a8fb780e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the ext4 kernel component in the Linux operating system is related to insufficient memory allocation for operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2019-10504

Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD...

CVE-2019-10302

Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

DEBIAN-CVE-2025-37909

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the skb to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor preven...

CVE-2025-37939

CVE-2025-37939 affects the Linux kernel in the libbpf component, specifically the BTF.ext core_relo header handling. The issue arises when btf_ext_parse_info() reads fields of the core_relo header without confirming its presence, potentially triggering a buffer read overflow as reported by OSS-Fu...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not verifying the existence of the BTF.ext corerelo header before accessing it in libbpf...

Malicious code in framer-motion-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0d106ab331c0898de25fe772017b00559c67c1738cb04dfa7c3a93c3005bdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3685 Malicious code in framer-motion-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0d106ab331c0898de25fe772017b00559c67c1738cb04dfa7c3a93c3005bdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-23150

In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in dosplit Syzkaller detected a use-after-free issue in ext4insertdentry that was caused by out-of-bounds access due to incorrect splitting in dosplit. BUG: KASAN: use-after-free in...

PT-2025-39242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak within the ath12k service ready ext event function. Specifically, the svc rdy ext.mac phy caps memory is not freed in failure scenarios, leading t...

Medium: ecs-service-connect-agent

Issue Overview: Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's extproc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the failur...

The vulnerability of the `nft_set_ext` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nftsetext function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

DEBIAN-CVE-2025-21897

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix picktaskscx picking non-queued tasks when it's called without balance a6250aa251ea "schedext: Handle cases where picktaskscx is called without preceding balancescx" added a workaround to handle the cases where...

UBUNTU-CVE-2025-21897

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix picktaskscx picking non-queued tasks when it's called without balance a6250aa251ea "schedext: Handle cases where picktaskscx is called without preceding balancescx" added a workaround to handle the cases where...