10902 matches found
EUVD-2015-2148
Malware in sbrugna...
EUVD-2014-3541
Malware in sbrugna...
EUVD-2021-1452
Malware in sbrugna...
EUVD-2021-24041
Malware in sbrugna...
The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool allows a attacker to execute arbitrary GET requests.
The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to execute arbitrary GET requests remotely...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414402)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414402 advisory. network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414405)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414405 advisory. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414645)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414645 advisory. An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414310)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414310 advisory. A use-after-free flaw was found in vhostnetsetbackend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414666)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414666 advisory. An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414644)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414644 advisory. An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414632)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414632 advisory. Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilitie...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: protobuf (UTSA-2025-984777)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984777 advisory. Any project that uses Protobuf Pure-Python backendto parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or ...
curl: OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)
Summary: In curl’s OpenSSL backend, osslgetchannelbinding retains a new reference to the server’s X509 certificate via SSLget1peercertificate and never releases it. When Negotiate SPNEGO over TLS is in use, this path is invoked and leaks one X509 object per trigger. Over many requests in a...
GHSA-9Q5R-WFVF-RR7F vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...
CVE-2025-58446 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...
MAL-2025-48394 Malicious code in react-dnd-html5-backend-14 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5cd4573cfbc13b9582d1e56e4560f4e7582760f20173d068752a8d25b97c91 Any computer that has this package installed or running should be considered...
CVE-2023-53586 scsi: target: Fix multiple LUN_RESET handling
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple LUNRESET handling This fixes a bug where an initiator thinks a LUNRESET has cleaned up running commands when it hasn't. The bug was added in commit 51ec502a3266 "target: Delete tmr from list before...
CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...