TencentOS Server 4: tigervnc (TSSA-2025:0319)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0319 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2014-7943

Malware in sbrugna...

EUVD-2016-8801

Malware in sbrugna...

EUVD-2006-0205

Malware in sbrugna...

EUVD-2014-7942

Malware in sbrugna...

EUVD-2022-49158

Malicious code in bioql PyPI...

EUVD-2023-12542

Malicious code in bioql PyPI...

EUVD-2022-49157

Malicious code in bioql PyPI...

EUVD-2022-51639

Malicious code in bioql PyPI...

EUVD-2024-28992

Malicious code in bioql PyPI...

EUVD-2022-49156

Malicious code in bioql PyPI...

EUVD-2022-49159

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-46342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been...

Linux Distros Unpatched Vulnerability : CVE-2023-0494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

CVE-2025-26600

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

CVE-2025-26600

CVE-2025-26600 is a use-after-free in X.Org/Xwayland. The issue occurs when a device is removed while still frozen, leaving queued events that, when replayed after the device is freed, trigger use-after-free. Connected advisories confirm Xwayland/xorg involvement and list related fixes across Xwa...

CVE-2025-26600 Xorg: xwayland: use-after-free in playreleasedevents()

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...