1168 matches found
RLSA-2025:12752 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove CVE-2025-22020 kernel: netsched:...
OSV-2025-698 Use-of-uninitialized-value in AesEncrypt_C
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=442261624 Crash type: Use-of-uninitialized-value Crash state: AesEncryptC wcAesCbcEncrypt Encrypt...
PT-2025-48733
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=442261624 Crash type: Use-of-uninitialized-value Crash state: AesEncrypt C wc AesCbcEncrypt Encrypt...
CVE-2025-9604
A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/encrypt/aes.go. The manipulation of the argument AuthSecretKey/StateSecretKey/OAuthTokenSecretKey leads to use of hard-coded cryptographic key . It is possible ...
CVE-2025-9604: Use of Hard-coded Cryptographic Key
A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/encrypt/aes.go. The manipulation of the argument AuthSecretKey/StateSecretKey/OAuthTokenSecretKey leads to use of hard-coded cryptographic key . It is possible ...
Linux Distros Unpatched Vulnerability : CVE-2023-31566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted. CVE-2023-31566 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2025-54799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library an...
Malicious code in alpha-encrypt-process-alert-phi (npm)
The package alpha-encrypt-process-alert-phi was found to contain malicious code...
Malicious code in chi-old-encrypt-grep-delta (npm)
The package chi-old-encrypt-grep-delta was found to contain malicious code...
Malicious code in delta-eta-encrypt-node-thread (npm)
The package delta-eta-encrypt-node-thread was found to contain malicious code...
Malicious code in encrypt-layout-helper (npm)
The package encrypt-layout-helper was found to contain malicious code...
Malicious code in enum-beta-java-double-encrypt (npm)
The package enum-beta-java-double-encrypt was found to contain malicious code...
Malicious code in humanapi-mongoose-encrypt (npm)
The package humanapi-mongoose-encrypt was found to contain malicious code...
Malicious code in load-book-encrypt-deserialize-permission (npm)
The package load-book-encrypt-deserialize-permission was found to contain malicious code...
Malicious code in mock-cloud-encrypt-gamma-dog (npm)
The package mock-cloud-encrypt-gamma-dog was found to contain malicious code...
Malicious code in ng-encrypt (npm)
The package ng-encrypt was found to contain malicious code...
Malicious code in short-root-error-encrypt-boolean (npm)
The package short-root-error-encrypt-boolean was found to contain malicious code...
Malicious code in small-encrypt-orchestrate-star-grid (npm)
The package small-encrypt-orchestrate-star-grid was found to contain malicious code...