MAL-2025-44619 Malicious code in hongwan-juexing-v3 (npm)

The package hongwan-juexing-v3 was found to contain malicious code...

PT-2025-48935

Уязвимость драйвера поддержки IOMMU drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c ядра операционных систем Android связана с недостаточной проверкой входных данных при обработке идентификаторов SID. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2025-35874

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An out-of-bounds write issue exists in the wl cfgscan update v3 schedscan results function within wl cfgscan.c due to an incorrect bounds check. This could le...

Linux Distros Unpatched Vulnerability : CVE-2022-1664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal...

Malicious code in node-fetch-v3 (npm)

The package node-fetch-v3 was found to contain malicious code...

SUSE-SU-2025:02998-1 Security update for ignition

This update for ignition fixes the following issues: - CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input bsc1248548...

Linux Distros Unpatched Vulnerability : CVE-2024-35226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. In affected versions template authors could...

CVE-2025-46407

A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the...

Linux Distros Unpatched Vulnerability : CVE-2021-37712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The npm package tar aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability...

Malicious code in dashboard-v3 (npm)

The package dashboard-v3 was found to contain malicious code...

Malicious code in kz-fe-v3 (npm)

The package kz-fe-v3 was found to contain malicious code...

Malicious code in mixedzone-curate-frontend-v3 (npm)

The package mixedzone-curate-frontend-v3 was found to contain malicious code...

Malicious code in op-payment-widget-v3 (npm)

The package op-payment-widget-v3 was found to contain malicious code...

MAL-2025-24851 Malicious code in kz-fe-v3 (npm)

The package kz-fe-v3 was found to contain malicious code...

MAL-2025-17975 Malicious code in dashboard-v3 (npm)

The package dashboard-v3 was found to contain malicious code...

MAL-2025-10556 Malicious code in @zalastax/nolb-_v3 (npm)

The package @zalastax/nolb-v3 was found to contain malicious code...

MAL-2025-26509 Malicious code in mixedzone-curate-frontend-v3 (npm)

The package mixedzone-curate-frontend-v3 was found to contain malicious code...

MAL-2025-28259 Malicious code in op-payment-widget-v3 (npm)

The package op-payment-widget-v3 was found to contain malicious code...

CVE-2025-55199

A flaw was found in helm.sh/helm/v3. A maliciously crafted JSON Schema file can trigger excessive memory consumption during Helm Chart validation, leading to an out-of-memory OOM termination. A remote attacker, requiring user interaction to provide the crafted file, can trigger this condition. Th...

CVE-2025-40920: Generation of Predictable Numbers or Identifiers

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. Data::UUID does not use a strong cryptographic source for generating UUIDs. Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable...