EUVD-2025-6396

Malicious code in bioql PyPI...

EUVD-2025-5091

Malicious code in bioql PyPI...

EUVD-2024-0375

Malicious code in bioql PyPI...

EUVD-2023-59721

Malicious code in bioql PyPI...

EUVD-2024-0243

Malicious code in bioql PyPI...

EUVD-2023-1805

Malicious code in bioql PyPI...

EUVD-2025-23147

Malicious code in bioql PyPI...

EUVD-2025-14321

Malicious code in bioql PyPI...

EUVD-2022-51684

Malicious code in bioql PyPI...

EUVD-2025-31047

Malicious code in bioql PyPI...

EUVD-2022-2856

Malicious code in bioql PyPI...

RLSA-2025:7496 Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. Security Fixes: libxslt: Use-After-Free in libxslt numbers.c CVE-2025-24855...

GHSA-7232-97C6-J525 Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Impact In LXD's devLXD server, the source container identification process uses process cmdline command line information, allowing attackers to impersonate other containers by spoofing process names. The core issue lies in the findContainerForPID function in lxd/apidevlxd.go. This function...

kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

PT-2025-46752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mnt ns release function. Specifically, a NULL pointer may be passed to this function when called from listmount. This can lead to issues when...

Vulnerability of the doMove_mount() function in the fs/namespace.c component, which allows a hacker to cause a service failure

The vulnerability of the doMovemount function in the fs/namespace.c component is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __legitimize_mnt() function in the fs/namespace.c component of the Linux kernel allows a attacker to trigger a service failure.

The vulnerability of the legitimizemnt function in the fs/namespace.c component of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE-SU-2025:03383-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50116: kernel: tty: ngsm: fix deadlock and link starvation in outgoing data path bsc1244824. - CVE-2024-53177: smb: prevent use-after-free due to...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20632)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20632 advisory. - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro Orabug: 38453918 CVE-2025-38499 Tenable has extracted the...

min-document vulnerable to prototype pollution

A vulnerability exists in the 'min-document' package prior to version 2.19.1, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...