EUVD-2022-29603

Malicious code in bioql PyPI...

EUVD-2022-52714

Malicious code in bioql PyPI...

EUVD-2022-1271

Malicious code in bioql PyPI...

EUVD-2022-46667

Malicious code in bioql PyPI...

EUVD-2021-7495

Malicious code in bioql PyPI...

EUVD-2021-28250

Malicious code in bioql PyPI...

EUVD-2021-8693

Malicious code in bioql PyPI...

SUSE CVE-2025-39906

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of the GPU would leave the oem i2c adapter registered resulting in a null pointer dereference when applications try to access the invalid device. cherr...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, nri-consul, emissary, azure-service-operator, regclient, headlamp, spire-controller-manager, envconsul, k8sgateway, rclone, fulcio, caddy, kapp, lazydocker, k3d, kubernetes-csi-driver-nfs, opa, cilium-cli, nri-haproxy, kor, kube-bench, helm-operator,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: harbor, dragonfly-operator, kubernetes-dashboard, kubernetes-dashboard-auth, nuclei, cloud-provider-vsphere, delve, headlamp, rancher, wire-go, cni-plugins, kyverno, step-kms-plugin, clickhouse-operator, vault-csi-provider, nodetaint, swagger, terraform-mcp-server,...

BIT-MONGODB-2025-3083 Malformed MongoDB wire protocol messages may cause mongos to crash

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to...

SUSE CVE-2023-53220

In the Linux kernel, the following vulnerability has been resolved: media: az6007: Fix null-ptr-deref in az6007i2cxfer In az6007i2cxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally reach az6007i2cxfer. If...

CVE-2025-39818 HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save Improper use of secondary pointer &dev-i2csubipregs caused kernel crash and out-of-bounds error: BUG: KASAN: slab-out-of-bounds in...

CVE-2023-53220 media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()

In the Linux kernel, the following vulnerability has been resolved: media: az6007: Fix null-ptr-deref in az6007i2cxfer In az6007i2cxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally reach az6007i2cxfer. If...

CVE-2022-50272 media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027i2cxfer Wei Chen reports a kernel bug as blew: general protection fault, probably for non-canonical address KASAN: null-ptr-deref in range 0x0000000000000010-0x0000000000000017...

PT-2025-40630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's DRM bridge ANX7625 driver. If an interrupt occurs before resource initialization is complete, the interrupt handler or worker may access uninitialized...

Linux Distros Unpatched Vulnerability : CVE-2025-38682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2cunregisterdevice Before commit df6d7277e552 i2c:...

Linux Distros Unpatched Vulnerability : CVE-2025-3083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connectio...

Linux Distros Unpatched Vulnerability : CVE-2021-41119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object...

CVE-2025-39680

The CVE-2025-39680 entry concerns the Linux kernel I2C RTL9300 driver. Vulnerable code path is rtl9300_i2c_smbus_xfer where data->block[0] is sourced from user input and could be very large, enabling an out-of-bounds access. The issue is remedied by validating data->block[0] before use. Aff...