EUVD-2025-37059

Malicious code in player-support-tools-ui npm...

MAL-2025-49194 Malicious code in epic-support-ticket-submission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1aadf77aabef022ef6f63fdd070af2c4e7e3be0cc3647840c5ba1e988fdfe6 The package epic-support-ticket-submission was found to contain malicious code...

MAL-2025-49234 Malicious code in player-support-tools-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e35bb951aab567fdb15daabc8db34691f937b3fefbf102bc1e19657c88aa72 The package player-support-tools-ui was found to contain malicious code...

Malicious code in epic-support-ticket-submission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1aadf77aabef022ef6f63fdd070af2c4e7e3be0cc3647840c5ba1e988fdfe6 The package epic-support-ticket-submission was found to contain malicious code...

EUVD-2025-37099

Malicious code in epic-support-ticket-submission npm...

GO-2025-4056 Mattermost Server is vulnerable to XSS via a Legal or Support setting in github.com/mattermost/mattermost-server

Mattermost Server is vulnerable to XSS via a Legal or Support setting in github.com/mattermost/mattermost-server...

EUVD-2025-36989

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxlfeatureinfo cxl EDAC calls cxlfeatureinfo to get the feature information and if the hardware has no Features support, cxlfs may be passed in as NULL. 51.957498 BUG: kernel NULL pointer...

CVE-2025-40089

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxlfeatureinfo cxl EDAC calls cxlfeatureinfo to get the feature information and if the hardware has no Features support, cxlfs may be passed in as NULL. 51.957498 BUG: kernel NULL pointer...

UBUNTU-CVE-2025-40104

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in the terms of mailbox API. Various drivers from various OSes supporting 10G adapters from Intel portfolio could easily...

UBUNTU-CVE-2025-40089

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxlfeatureinfo cxl EDAC calls cxlfeatureinfo to get the feature information and if the hardware has no Features support, cxlfs may be passed in as NULL. 51.957498 BUG: kernel NULL pointer...

CVE-2025-40089 cxl/features: Add check for no entries in cxl_feature_info

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxlfeatureinfo cxl EDAC calls cxlfeatureinfo to get the feature information and if the hardware has no Features support, cxlfs may be passed in as NULL. 51.957498 BUG: kernel NULL pointer...

CVE-2025-40089 cxl/features: Add check for no entries in cxl_feature_info

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxlfeatureinfo cxl EDAC calls cxlfeatureinfo to get the feature information and if the hardware has no Features support, cxlfs may be passed in as NULL. 51.957498 BUG: kernel NULL pointer...

CVE-2025-40089

CVE-2025-40089 concerns a kernel NULL pointer dereference in cxl_feature_info() when cxlfs can be NULL if hardware features are not present. The fix adds a check for cxlfs before dereferencing and returns -EOPNOTSUPP when no cxlfs exist due to lack of hardware support. Connected sources (e.g., OS...

CVE-2025-64284

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through = 1.0.7...

[SECURITY] Fedora 42 Update: qt6-qtwayland-6.9.3-1.fc42

Qt6 - Wayland platform support and QtCompositor module...

PT-2025-44379

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0dj Description The Linux kernel contains a flaw in the cxl/features component. Specifically, the cxl feature info function may be called with a NULL pointer when hardware does not support features,...

Linux Distros Unpatched Vulnerability : CVE-2025-40089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxlfeatureinfo cxl EDAC calls cxlfeatureinfo to ge...

EUVD-2025-36610

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through = 1.1.1...

CVE-2025-64284

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through = 1.0.7...

CVE-2025-64284

CVE-2025-64284 corresponds to a Local File Inclusion vulnerability in the WordPress Majestic Support plugin. The issue stems from improper control of filenames for include/require statements, enabling PHP Local File Inclusion in Majestic Support versions up to 1.1.1 (and potentially 1.1.2 as late...