CVE-2023-54048

The CVE-2023-54048 issue affects the Linux kernel RDMA/bnxt_re driver. It describes a race where completions may still be scheduled for a QP during destruction, because CQs can be active while the QP is being destroyed. The HW can generate completions that indicate the QP is destroyed, leading to...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

CVE-2025-61976: Improper Check for Unusual or Exceptional Conditions

CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper check for unusual or exceptional conditions. If a remote attacker sends a specially crafted request to the Video Download interface, the system may become unresponsive...

CVE-2025-59479: Improper Restriction of Rendered UI Layers or Frames

CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper restriction of rendered UI layers or frames. If a user clicks on content on a malicious web page while logged into the product, unintended operations may be performed on the product...

CVE-2025-66357: Improper Check for Unusual or Exceptional Conditions

CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper check for unusual or exceptional conditions. When the Video Download feature is in a specific communication state, the product's resources may be consumed abnormally...

CVE-2025-36015

The CVE-2025-36015 entry affects IBM Controller (11.1.0–11.1.1) and IBM Cognos Controller (11.0.0–11.0.1 FP6). The vulnerability is caused by improper validation of a specified quantity size input, enabling an authenticated user to trigger a denial of service (availability impact: HIGH) without i...

kernel: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

An out-of-bounds write vulnerability exists in the linux kernel, such that when mlx5ibgethwstats is used forthe device portnum = 0, There is a special handling in order to use the correct counters, but, portnum is being passed down the stack without any change leading to damage in system...

RHEL 9 : kernel (RHSA-2025:22066)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22066 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: Validate UAC...

EUVD-2022-55679

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

EUVD-2025-136985

Malicious code in imuay-agg-ib npm...

EUVD-2025-137622

Malicious code in polymer-ib-sgasdi npm...

EUVD-2025-137624

Malicious code in polymer-ib-sgahsdi npm...

EUVD-2025-137630

Malicious code in polymer-ib-agaad npm...

EUVD-2025-137632

Malicious code in polymer-ib-aad npm...

Malicious code in polymer-ib-aad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cac35184b242cc06df46464efa4bec403d0990657ecaef3e0dfd6af3755a116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-agaiada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7b044b19ac241af93137e5d57be1f8f90f4dcd2913ee238ad28427496490da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-sgasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d291d66c00fe30ab41ada6f47268c9128fddc9db353f3a9bbebab219e2af730e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137626

Malicious code in polymer-ib-sgahsddi npm...

EUVD-2025-137628

Malicious code in polymer-ib-agaiada npm...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990536 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Restore allocated resources on failed copyout Fix a resource leak if an error occurs...