SUSE CVE-2022-50511

In the Linux kernel, the following vulnerability has been resolved: lib/fonts: fix undefined behavior in bit shift for getdefaultfont Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds i...

EUVD-2019-13750

Malware in sbrugna...

EUVD-2021-0871

Malware in sbrugna...

EUVD-2018-17947

Malware in sbrugna...

EUVD-2020-28361

Malware in sbrugna...

EUVD-2019-0370

Malware in sbrugna...

EUVD-2024-44458

Malicious code in bioql PyPI...

EUVD-2024-2057

Malicious code in bioql PyPI...

EUVD-2024-1491

Malicious code in bioql PyPI...

EUVD-2022-5169

Malicious code in bioql PyPI...

EUVD-2024-53186

Malicious code in bioql PyPI...

kernel: drm/vkms: Fix memory leak in vkms_init()

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix memory leak in vkmsinit A memory leak was reported after the vkms module install failed. unreferenced object 0xffff88810bc28520 size 16: comm "modprobe", pid 9662, jiffies 4298009455 age 42.590s hex dump first 16...

CVE-2025-38603

Removed by vendor...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/vkms: Fix use after free and double free on init error CVE-2025-22097 kernel: netsched: ets: Fix double list add in class with netem as child qdisc CVE-2025-37914 kernel: Bluetooth:...

MAL-2025-8122 Malicious code in @kms-types/config (npm)

The package @kms-types/config was found to contain malicious code...

Malicious code in @kms-types/config (npm)

The package @kms-types/config was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, helm-docs, grafana-pyroscope, kuberay-operator-fips, thanos-operator-fips, crossplane-provider-azure-authorization, cyberark-secrets-provider-for-k8s, jaeger-operator-fips, terraform-provider-azapi-fips, kubescape, seaweedfs, step,...

CVE-2018-6185

In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote access to purge and undelete API calls on encryption zone keys. The Navigator Key Trustee KMS includes 2 API calls in addition to those in Apache Hadoop KMS: purge and undelete. The KMS ACL values for...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by unknown CVE via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-J8X2-777P-23FC...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by CVE-2025-2886 via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: CVE-2025-2886 Source advisory: OSV:GHSA-V4WR-J3W6-MXQC...