USN-7930-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - MTD block device drivers;...

USN-7930-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - MTD block device drivers;...

Malicious code in polygon-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b975bdc3690d0deccba20490d0c56eec9e073ff48c7f949d5c9554489445ff2 The package polygon-src was found to contain malicious code. Source: ghsa-malware f3e7ff8566f8fc6fd21a8bcad4e3d2684026f6e9eb0a5ac2ccff5d46112ac99e An...

Malicious code in @mohamed1687/iut-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488ccf33f70ad27f3dba325a7686c40ac429f84d8ae53d608dc8103e1320adb The package @mohamed1687/iut-encrypt was found to contain malicious code. Source: ghsa-malware...

GHSA-VX9Q-RHV9-3JVG vulnerabilities

Vulnerabilities for packages: druid, trino, spark, apache-nifi, apache-pulsar...

CVE-2025-67721 vulnerabilities

Vulnerabilities for packages: druid, trino, spark, apache-nifi, apache-pulsar...

CVE-2025-67721 vulnerabilities

Vulnerabilities for packages: geoserver, apache-pulsar, pinot-fips, apache-pulsar-fips, spark-fips, pinot, druid, trino, ranger, apache-nifi, spark...

Improper Cleanup Of Sensitive Data

Ansible is vulnerable to improper cleanup of sensitive data. The vulnerability is due to the awsssm connection plugin not performing garbage collection after playbook execution, which allows sensitive files to remain in the storage bucket and exposes confidential data to unauthorized access...

SUSE CVE-2025-53040

unknown...

SUSE CVE-2025-53045

unknown...

SUSE CVE-2025-53054

unknown...

CVE-2025-67749

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory...

CVE-2025-54369

Node-SAML vulnerable in versions 5.0.1 and earlier because it loads the assertion from the unsigned original response document, which differs from the parts verified during signature validation. This allows an attacker to modify authentication details within a valid SAML assertion (e.g., removing...

CVE-2025-43542

This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime...

CVE-2025-43510

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpect...

EUVD-2025-203145

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to elevate privileges...

USN-7907-5 linux-azure, linux-azure-4.15, linux-oracle, vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - Mailbox framework; -...

USN-7907-5: Linux kernel kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - Mailbox framework; -...

Malicious code in cms_comp_static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e057568833f54e2250c5364e595d7a3046f4eb94f2484b9a0a2236b948cb10f The package cmscompstatic was found to contain malicious code. Source: ghsa-malware 38ce02191cf2d82246d56083ba8f7c2c4c0f14a71060bf8beaea95851f3c7a1e...

Malicious code in sd-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9616f3280e84767be7a4d7eb72057a907816c66dba6104915b31df22260c16f4 The package sd-pay was found to contain malicious code. Source: ghsa-malware a8a08228b2c2618675e777b8bd306f5499f39767b26a7e12deb1dc0ce91175b5 Any...