600 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993296)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993296 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: Fix refcount leak in spufsinitisolatedloader offindnodebypath returns remote devic...
EUVD-2025-203648
In the Linux kernel, the following vulnerability has been resolved: vmwballoon: indicate success when effectively deflating during migration When migrating a balloon page, we first deflate the old page to then inflate the new page. However, if inflating the new page succeeded, we effectively...
BIT-FLUX-2022-36035 Flux CLI Workload Injection
Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration like Git repositories, and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allow...
ROS-20251202-05
A vulnerability in the DevTools component of the Google Chrome browser is related to an access control flaw in an isolated environment. of an isolated environment. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the sandbox protection mechanism. sandbox...
Remote Code Execution (RCE)
Happy DOM is vulnerable to Remote Code Execution RCE. The vulnerability is due to the use of a non-isolated Node.js VM context with JavaScript evaluation enabled by default, which allows an attacker to run untrusted code that can escape the sandbox—potentially gaining access to process-level...
ROS-20251125-13
A vulnerability in the maskedPaths feature of the isolated container runc tool is related to the runc state that allows link tracking. Exploitation of the vulnerability could allow an attacker to Affect the confidentiality, integrity and availability of protected information...
A Single-Root, Multi-Curve, Context-Isolated, PQC-Pluggable Cryptographic Identity Primitive with Stateless Secret Rotation
Cryptographic identity anchors modern decentralized systems, yet current standards like BIP-39 and BIP-32 are structurally insufficient for the demands of multi-curve, multi-domain, and post-quantum PQC environments. These legacy schemes rely on a monolithic identity root with no inherent context...
HP Integrated Lights-Out Improper Input Validation (CVE-2022-28632)
A potential arbitrary code execution and a denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute...
HP Integrated Lights-Out Improper Input Validation (CVE-2022-28636)
A potential local arbitrary code execution and a local denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitra...
HP Integrated Lights-Out Improper Input Validation (CVE-2022-28631)
A potential arbitrary code execution and a denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute...
EUVD-2025-117286
Malicious code in isolated-silver-ape npm...
EUVD-2025-97892
Malicious code in isolatedcrocodilez3n npm...
EUVD-2025-104412
Malicious code in isolatedmammalz3n npm...
EUVD-2025-76511
Malicious code in isolatedtakin-excellentdev npm...
EUVD-2025-76513
Malicious code in isolatedaardvark-excellentdev npm...
MAL-2025-104430 Malicious code in isolated_aardvark-excellentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3eca775bf92137d79164f3970d5e65d3a1c7a972b9ad861376b52e6cf04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78959
Malicious code in isolatedpenguinz3n npm...
EUVD-2025-81484
Malicious code in isolatedorca0xrequest npm...
MAL-2025-104432 Malicious code in isolated_fox_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d899afdded473421da61c579b945728242c09109efb341cdac76f1b75fda7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...