6376 matches found
MAL-2025-46875 Malicious code in zenobia-spectron-webdriver-express-avior (npm)
The package zenobia-spectron-webdriver-express-avior was found to contain malicious code...
MAL-2025-45667 Malicious code in pyxis-link-express-prettier (npm)
The package pyxis-link-express-prettier was found to contain malicious code...
MAL-2025-43671 Malicious code in buffer-express-eslint-plugin-halley (npm)
The package buffer-express-eslint-plugin-halley was found to contain malicious code...
MAL-2025-44635 Malicious code in html-webpack-plugin-babel-express-inquirer (npm)
The package html-webpack-plugin-babel-express-inquirer was found to contain malicious code...
Malicious code in pyxis-link-express-prettier (npm)
The package pyxis-link-express-prettier was found to contain malicious code...
Malicious code in zenobia-spectron-webdriver-express-avior (npm)
The package zenobia-spectron-webdriver-express-avior was found to contain malicious code...
MAL-2025-46088 Malicious code in slides-express-norma-native (npm)
The package slides-express-norma-native was found to contain malicious code...
PCI/ASPM: Fix link state exit during switch upstream function removal
...
bonding: check xdp prog when set bond mode
...
bnxt: properly flush XDP redirect lists
...
nvme-tcp: sanitize request list handling
...
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
...
eth: bnxt: always recalculate features after XDP clearing, fix null-deref
...
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
...
wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
...
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: [email protected]" in its release description, is not vulnerable).
...
drm/amd: check num of link levels when update pcie param
...
Linux Distros Unpatched Vulnerability : CVE-2025-38624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: pnvphp: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unplugged, the pnvphp driver leaked the allocated IRQ...
Linux Distros Unpatched Vulnerability : CVE-2022-50157
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: PCI: microchip: Fix refcount leak in mcpcieinitirqdomains ofgetnextchild returns a node...
Vulnerability of the cxl_decoder_release() function in the drivers/cxl/core/bus.c module – The CXL Device Support Driver for Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the cxldecoderrelease function in the drivers/cxl/core/bus.c module – The drivers for supporting CXL devices Compute Express Link in the Linux operating system are vulnerable due to the reutilization of previously released memory. Exploiting this vulnerability could allow an...