libtiff security update

4.0.9-36 - fix CVE-2025-8176: prevent skipping first line in tiffdither and tiffmedian tools RHEL-120230...

e-Excellence U-Office Force SQL注入漏洞

e-Excellence U-Office Force is an e-Office platform from China-based First Class Technology e-Excellence. An SQL injection vulnerability exists in e-Excellence U-Office Force that originates from unvalidated input and could lead to an SQL injection attack...

The vulnerability of the first_kex_packet_follows() function in the libssh library, which allows a hacker to cause a service failure

The vulnerability of the firstkexpacketfollows function in the libssh library is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the first_remote_rcu() function in the vxlan component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the firstremotercu function in the vxlan component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990462 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990292 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989742 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserv...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990272 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 net: dsa: mv88e6xxx:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990223 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserv...

The vulnerability of the list_first_entry() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the listfirstentry function in the Linux operating system’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990060)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990060 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe...

rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)

A flaw was found in Rack where the Rack::Multipart::Parser buffers the multipart preamble memory without size limits. A remote attacker can send a crafted multipart/form-data request with a very large preamble before its first boundary, causing excessive memory consumption and denial of service...

MAL-2025-49345 Malicious code in kb-first-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b498b7e91f79ce12116c06991401774397390aa4750938f85f34fa87b1cfccd The package kb-first-package was found to contain malicious code...

EUVD-2025-37527

Malicious code in kb-first-package npm...

Malicious code in kb-first-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b498b7e91f79ce12116c06991401774397390aa4750938f85f34fa87b1cfccd The package kb-first-package was found to contain malicious code...

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

...

CVE-2025-62267

Multiple cross-site scripting XSS vulnerabilities in web content template’s select structure page in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 35 through update 92 allow remote attackers to inject arbitrary we...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame’s length check When calling buftoxdp, the len argument represents the length of the frame data, excluding the length of the virtio header vi-hdrlen. We check that len is not greater than the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: i40e: Fixed potential invalid access when the MAC list is empty. The listfirstentry function never returns NULL—if the list is empty, it still returns a pointer to an invalid object, resulting in potential invalid memory access...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: A null pointer check was added in modhdcphdcp1createsession. The function modhdcphdcp1createsession calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointe...