24997 matches found
PT-2025-44098
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the pinctrl subsystem where the return value of the pinmux ops::get function name function is not adequately checked. The pinmux generic get function...
Malicious code in dependencies-backend-mutation-string (npm)
The package dependencies-backend-mutation-string was found to contain malicious code...
Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...
MAL-2025-46439 Malicious code in ultra-less-ethology-string (npm)
The package ultra-less-ethology-string was found to contain malicious code...
MAL-2025-46141 Malicious code in start-string-mensa-mocha (npm)
The package start-string-mensa-mocha was found to contain malicious code...
MAL-2025-46149 Malicious code in string-stratigraphy-alphard-markdown (npm)
The package string-stratigraphy-alphard-markdown was found to contain malicious code...
MAL-2025-43963 Malicious code in dependencies-backend-mutation-string (npm)
The package dependencies-backend-mutation-string was found to contain malicious code...
Malicious code in string-modifier-utils (npm)
The package string-modifier-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46148 Malicious code in string-modifier-utils (npm)
The package string-modifier-utils was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
OESA-2025-2211 rubygem-rack security update
Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a single...
OESA-2025-2155 gnuplot security update
Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed i.e., you don't have to pay for it. It was originally created to allow scientists and students to visualize mathematica...
SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2025:00614-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:00614-1 advisory. Upgrade to 15.12: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Tenable h...
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.12: CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
bpf: Reject %p% format string in bprintf-like helpers
...
Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
...
Backticks not treated as string delimiters in html/template
...
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.
...
It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.
...