16 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-22987
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actapi: avoid dereferencing ERRPTR in tcfidrinfodestroy syzbot reported a crash in tcactinhw during netns teardown where tcfidrinfodestroy passed an...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35857)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35857 advisory. - In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL...
Security update for gstreamer-plugins-rs
This update for gstreamer-plugins-rs fixes the following issues: Update crate shlex to 1.3.0: RUSTSEC-2024-0006: Fixed multiple issues involving quote API bsc1230028 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
EUVD-2022-4718
Malicious code in bioql PyPI...
CVE-2021-29519
TensorFlow is an end-to-end open source platform for machine learning. The API of tf.rawops.SparseCross allows combinations which would result in a CHECK-failure and denial of service. This is because the...
CVE-2023-53034 ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
In the Linux kernel, the following vulnerability has been resolved: ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans There is a kernel API ntbmwcleartrans would pass 0 to both addr and size. This would make xlatepos negative. 23.734156 switchtec switchtec0: MW 0: part 0 addr...
CVE-2024-58061
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls this is a WARNON, but that should remain since internally we want to know about bugs that may cause this. Prevent deactivating all links in the debugf...
Linux Distros Unpatched Vulnerability : CVE-2024-35857
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmpbuildprobe First problem is a double call ...
DEBIAN-CVE-2025-21810
In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API classdeviternext There are a potential wild pointer dereferences issue regarding APIs classdeviterinit|next|exit, as explained by below typical usage: // All members of @it...
SUSE-SU-2023:4978-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution bsc1218033. - CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service bsc1218032. - CVE-2023-41074: Fixed use-after-free...
CLSA-2023-1702495193 openssl: Fix of CVE-2023-5363
CVE-2023-5363: evp: process key length and iv length early if present...
MikroTik RouterOS 7.1 < 7.12 Access Control Vulnerability
MikroTik RouterOS is prone to an access control vulnerability in the REST API. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
Impact Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...
SUSE-SU-2022:2532-1 Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issues: - CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API bsc1178829...
SUSE-RU-2022:1391-1 Recommended update for salt
This update for salt fixes the following issues: - Fix regression preventing bootstrapping new clients caused by redundant dependency on psutil bsc1197533 - Prevent data pollution between actions processed at the same time bsc1197637 - Fix salt-ssh opts poisoning. bsc1197637 - Clear network...
OPENSUSE-SU-2022:0042-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 98.0.4758.102 boo1195986 CVE-2022-0603: Use after free in File Manager CVE-2022-0604: Heap buffer overflow in Tab Groups CVE-2022-0605: Use after free in Webstore API CVE-2022-0606: Use after free in ANGLE CVE-2022-0607: Use after fr...