1700 matches found
CVE-2025-40185
In the Linux kernel, the following vulnerability has been resolved: ice: iceadapter: release xa entry on adapter allocation failure When iceadapternew fails, the reserved XArray entry created by xainsert is not released. This causes subsequent insertions at the same index to return -EBUSY,...
CVE-2025-64345
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear...
EUVD-2025-133117
Malicious code in teate-thy-sonic-gegki npm...
EUVD-2025-134611
Malicious code in analuba-inu-nil013ka npm...
CVE-2025-63927
creationtimestamp| type| source ---|---|--- 2025-11-12 19:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hfseijvk26...
EUVD-2025-135003
Malicious code in zaskia-poke12 npm...
EUVD-2025-141092
Malicious code in kapvino-soafsi-vaidas npm...
CVE-2025-64293
creationtimestamp| type| source ---|---|--- 2025-11-12 18:39:15+00:00| seen| https://gist.github.com/Darkcrai86/7b5a1c4d209d9bd190d97810324c0283...
EUVD-2025-145993
Malicious code in ameerzaheer npm...
CVE-2025-24848
Protection mechanism failure for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...
EUVD-2025-150023
Malicious code in teagood-cuekin25 npm...
EUVD-2025-144047
Malicious code in nabuf-ogof-dasgsgsi npm...
CVE-2025-63830
creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...
CVE-2025-11567
CVE-2025-11567 affects Schneider Electric PowerChute Serial Shutdown. The connected Nessus entry states an elevation of privilege vulnerability due to improper access control in Azure Monitor Agent, exploitable by a locally authenticated attacker on affected systems running PowerChute Serial Shut...
CVE-2025-40161
creationtimestamp| type| source ---|---|--- 2025-11-12 11:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gl5nfvwd2k 2025-11-12 13:17:49+00:00| seen| https://gist.github.com/Darkcrai86/471c5002d463ec537a71a0c209dec26e...
CVE-2025-40163
In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dlserver before CPU goes offline IBM CI tool reported kernel warning1 when running a CPU removal operation through drmgr2. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0 PID: 0 at kernel/sched/cpudeadline.c:219...
CVE-2025-40141
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on isoconnfree This attempt to fix similar issue to scoconnfree where if the conn-sk is not set to NULL may lead to UAF on isoconnfree...
CVE-2025-40134
In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in dmsuspend There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend is invoked before table load completes: BUG...
Important: Red Hat Security Advisory: squid:4 security update
An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...