13379 matches found
CVE-2025-40292 virtio-net: fix received length check in big packets
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix received length check in big packets Since commit 4959aebba8c0 "virtio-net: use mtu size as buffer length for big packets", when guest gso is off, the allocated size for big packets is not MAXSKBFRAGS PAGESIZE...
PT-2025-49425
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the virtio-net component of the Linux kernel related to the handling of received packet lengths in large packets. A change introduced by commit 4959aebba8c0 altered how...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
F5 BIG-IP CVE-2023-46747 - Unauthenticated RCE + Auto Reverse...
RockyLinux 8 : container-tools:4.0 (RLSA-2023:2802)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2802 advisory. golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stack exhaustion in all Parse functions CVE-2022-196...
RLSA-2023:2802 Moderate: container-tools:4.0 security and bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stack exhaustion in all Parse functions CVE-2022-1962 golang:...
F5 Networks BIG-IP : BIND vulnerability (K000157948)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K000157948 advisory. In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, ...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 2 security fixes: 460017370 High CVE-2025-13223: Type Confusion in V8. Reported by Clément Lecigne of Google's Threat Analysis Group on 2025-11-12 450328966 High CVE-2025-13224: Type Confusion in V8. Reported by Google Big Sleep on 2025-10-09...
Malicious code in tau-fork-hot-web-big (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176989
Malicious code in protected-reject-decrypt-bad-big npm...
EUVD-2025-179373
Malicious code in decrypt-info-meta-table-big npm...
EUVD-2025-177471
Malicious code in omega-big-zero-export-java npm...
MAL-2025-186509 Malicious code in decrypt-info-meta-table-big (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4883bdd1cd22e99353350c8cdb2c98e0bd344ac3801dc0999b5d205d66f663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180076
Malicious code in big-tau-stack-root-compress npm...
EUVD-2025-178651
Malicious code in grep-zero-sigma-log-big npm...
EUVD-2025-177272
Malicious code in permission-big-omega-alert-phi npm...
MAL-2025-188411 Malicious code in omega-big-zero-export-java (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6452494d4a91b262c8f8c973f098395e47d3fd525719d07e2c95a4915fae749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180079
Malicious code in big-monitor-moon-iota-warn npm...
EUVD-2025-176727
Malicious code in reject-finally-data-big-long npm...