1298 matches found
PT-2025-45348
Name of the Vulnerable Software and Affected Versions containerd versions 0.1.0 through 1.7.28 containerd versions 2.0.0-beta.0 through 2.0.6 containerd versions 2.1.0-beta.0 through 2.1.4 containerd versions 2.2.0-beta.0 through 2.2.0-rc.1 Description containerd is an open-source container runti...
CVE-2025-39993
In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imondisconnect Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in createpipe include/linux/usb.h:1945 inline BUG: KASAN: use-after-free in sendpacket+0xa2d/0xbc0...
CVE-2025-62378
CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling...
CVE-2025-62378 CommandKit exposes incorrect command name in context object for message command aliases
CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling...
EUVD-2025-34580
In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imondisconnect Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in createpipe include/linux/usb.h:1945 inline BUG: KASAN: use-after-free in sendpacket+0xa2d/0xbc0...
UBUNTU-CVE-2025-39993
In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imondisconnect Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in createpipe include/linux/usb.h:1945 inline BUG: KASAN: use-after-free in sendpacket+0xa2d/0xbc0...
CVE-2025-39993 media: rc: fix races with imon_disconnect()
In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imondisconnect Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in createpipe include/linux/usb.h:1945 inline BUG: KASAN: use-after-free in sendpacket+0xa2d/0xbc0...
EUVD-2025-34090
yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...
CVE-2025-62363 yt-grabber-tui allows arbitrary code execution via configurable yt-dlp path
yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...
CVE-2025-62363 yt-grabber-tui allows arbitrary code execution via configurable yt-dlp path
yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...
Use of Incorrectly-Resolved Name or Reference
Overview commandkit is a Beginner friendly command & event handler for Discord.js Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference due to the ctx.commandName property exposing the alias used instead of the canonical command name in both middleware...
PT-2025-41824
Name of the Vulnerable Software and Affected Versions yt-grabber-tui versions prior to 1.0-rc Description yt-grabber-tui is a terminal user interface application for downloading videos. Versions before 1.0-rc allow configuration of the path to the yt-dlp executable via the path to yt dlp...
CLSA-2025-1760021057 tpm2-tss: Fix of CVE-2023-22745
CVE-2023-22745: fix out-of-bounds access in tss2rc layer handler...
GHSA-592Q-R679-2JPC vulnerabilities
Vulnerabilities for packages: linux-qemu-rc, linux-aws-generic, linux-vmware-generic, linux-gcp-generic, linux-azure, linux-aws, linux-gcp, linux-azure-generic...
CVE-2023-52979 vulnerabilities
Vulnerabilities for packages: linux-qemu-rc, linux-aws-generic, linux-vmware-generic, linux-gcp-generic, linux-azure, linux-aws, linux-gcp, linux-azure-generic...
CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
EUVD-2005-2046
Malware in sbrugna...
EUVD-2011-4720
Malware in sbrugna...