PT-2025-48653

Name of the Vulnerable Software and Affected Versions Eclipse Paho Go MQTT v3.1 library paho.mqtt.golang versions 1.5.0 and earlier Description The Eclipse Paho Go MQTT v3.1 library is susceptible to an issue where UTF-8 encoded strings exceeding 65535 bytes in length may be incorrectly encoded...

TencentOS Server 4: libsoup3 (TSSA-2025:0394)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0394 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: librsvg2 (TSSA-2025:0745)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0745 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Security update for tiff

This update for tiff fixes the following issues: Update to 4.7.1: CVE-2025-8851: Fixed stack-based buffer overflow bsc1248278. CVE-2025-9900: Fixed write-what-where via TIFFReadRGBAImageOriented bsc1250413. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989695 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. When firstip is 0,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990054 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency i...

CVE-2025-33131

IBM Db2 High Performance Unload (versions 5.1.0.1, 6.1, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.5, 6.5.0.0 IF1, and 5.1) is affected by CVE-2025-33131 where an authenticated user could crash the program due to a buffer being overwritten on the stack. The IBM advisory attributes the issue to a stack-allocate...

Linux Distros Unpatched Vulnerability : CVE-2022-50580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-throttle: prevent overflow while calculating wait time There is a problem found by code review in tgwithinbpslimit that 'bpslimit jiffyelapsedrnd' might...

[SECURITY] [DLA 4336-1] sysstat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4336-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 17, 2025 https://wiki.debian.org/LTS -...

AlmaLinux 10 : kernel (ALSA-2025:11855)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11855 advisory. kernel: RDMA/mlx5: Fix pagesize variable overflow CVE-2025-22091 kernel: ext4: fix out-of-bound read in ext4xattrinodedecrefall CVE-2025-22121 kernel:...

EUVD-2019-10108

Malware in sbrugna...

EUVD-2021-16084

Malware in sbrugna...

EUVD-2021-19459

Malware in sbrugna...

Unity Linux 20.1060a / 20.1070a Security Update: tigervnc (UTSA-2025-986113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986113 advisory. A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when...

RLSA-2025:7067 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

EUVD-2017-12855

Malicious code in bioql PyPI...

EUVD-2025-9633

Malicious code in bioql PyPI...

EUVD-2023-59740

Malicious code in bioql PyPI...

EUVD-2021-9697

Malicious code in bioql PyPI...

CVE-2023-53524

CVE-2023-53524 involves an integer overflow in the Linux kernel’s iwl_write_to_user_buf() used by iwl_dbgfs_monitor_data_read() in iwlwifi PCIe. The bug computes buf_size_left from count and *bytes_copied, then reduces it and may pass a negative value to copy_to_user, causing a heap overflow. It ...