EUVD-2025-176591

Malicious code in route-await-root-monitor-nu npm...

EUVD-2025-176576

Malicious code in runtime-stack-awk-visualize-monitor npm...

EUVD-2025-177881

Malicious code in meta-monitor-info-import-final npm...

EUVD-2025-178446

Malicious code in import-log-monitor-rho-function npm...

EUVD-2025-178156

Malicious code in lambda-quick-monitor-optimize-book npm...

EUVD-2025-179247

Malicious code in double-rain-protected-import-monitor npm...

EUVD-2025-179058

Malicious code in error-bash-monitor-stack-decode npm...

EUVD-2025-180079

Malicious code in big-monitor-moon-iota-warn npm...

EUVD-2025-179690

Malicious code in cluster-wind-fork-view-monitor npm...

EUVD-2025-179681

Malicious code in cold-old-monitor-zeta-process npm...

EUVD-2025-177268

Malicious code in permission-permission-link-monitor-web npm...

EUVD-2025-176057

Malicious code in tau-import-float-monitor-finally npm...

EUVD-2025-175954

Malicious code in thread-monitor-async-omicron-optimize npm...

EUVD-2025-179925

Malicious code in byte-nu-monitor-module-static npm...

EUVD-2025-176139

Malicious code in sun-thread-monitor-void-sun npm...

SUSE CVE-2025-40122

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

SUSE CVE-2025-40131

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...

EUVD-2025-50823

Parse Server allows public explain queries which may expose sensitive database performance information and schema details...

UBUNTU-CVE-2025-40181

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forc...

GHSA-MJ6P-P843-X5WC Observability Operator is vulnerable to Incorrect Privilege Assignment through its Custom Resource MonitorStack

A flaw was found in the Observability Operator. The Operator creates a ServiceAccount with ClusterRole upon deployment of the Namespace-Scoped Custom Resource MonitorStack. This issue allows an adversarial Kubernetes Account with only namespaced-level roles, for example, a tenant controlling a...