6634 matches found
EUVD-2025-6291
Malicious code in bioql PyPI...
EUVD-2023-59883
Malicious code in bioql PyPI...
EUVD-2022-15629
Malicious code in bioql PyPI...
EUVD-2025-26786
Malicious code in bioql PyPI...
RLSA-2025:7496 Important: libxslt security update
libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. Security Fixes: libxslt: Use-After-Free in libxslt numbers.c CVE-2025-24855...
GHSA-7232-97C6-J525 Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server
Impact In LXD's devLXD server, the source container identification process uses process cmdline command line information, allowing attackers to impersonate other containers by spoofing process names. The core issue lies in the findContainerForPID function in lxd/apidevlxd.go. This function...
kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface
A flaw was found in the Linux kernel's IPsec packet transformation xfrm interface. A local user with network administration privileges can exploit this flaw to cause a Denial of Service DoS by crashing the system. This vulnerability occurs due to improper state validation when modifying...
fs/namespace.c DoS
The vulnerability of the doMovemount function in the fs/namespace.c component is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-46752
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mnt ns release function. Specifically, a NULL pointer may be passed to this function when called from listmount. This can lead to issues when...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the legitimizemnt function in the fs/namespace.c component of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE-SU-2025:03383-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50116: kernel: tty: ngsm: fix deadlock and link starvation in outgoing data path bsc1244824. - CVE-2024-53177: smb: prevent use-after-free due to...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20632)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20632 advisory. - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro Orabug: 38453918 CVE-2025-38499 Tenable has extracted the...
min-document vulnerable to prototype pollution
A vulnerability exists in the 'min-document' package prior to version 2.19.1, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...
GHSA-RX8G-88G5-QH64 min-document vulnerable to prototype pollution
A vulnerability exists in the 'min-document' package prior to version 2.19.1, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...
CVE-2025-57352
A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...
CVE-2025-57352
A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...
CVE-2025-57352
The min-document package prior to version 2.19.0 is vulnerable to a prototype pollution vulnerability (CWE-1321) due to improper handling of namespace operations in the removeAttributeNS method. An attacker can provide malicious input involving the proto property to manipulate the prototype c...
min-document 安全漏洞
min-document is a software library from the individual developer Jake Verbaten. A security vulnerability exists in min-document versions prior to 2.19.0, which stems from mishandling of namespace operations in the removeAttributeNS method, which could result in a denial of service or execution of...
CVE-2025-57352
A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...
PT-2025-39316
Name of the Vulnerable Software and Affected Versions min-document versions prior to 2.19.0 Description A flaw exists in the 'min-document' package due to improper handling of namespace operations within the removeAttributeNS function. An attacker can exploit this by manipulating the prototype...