973 matches found
EUVD-2025-13164
Malicious code in bioql PyPI...
EUVD-2025-13191
Malicious code in bioql PyPI...
EUVD-2025-11828
Malicious code in bioql PyPI...
EUVD-2025-9372
Malicious code in bioql PyPI...
EUVD-2022-55046
Malicious code in bioql PyPI...
EUVD-2022-54815
Malicious code in bioql PyPI...
EUVD-2022-33940
Malicious code in bioql PyPI...
EUVD-2024-53213
Malicious code in bioql PyPI...
EUVD-2024-53130
Malicious code in bioql PyPI...
EUVD-2025-23897
Malicious code in bioql PyPI...
EUVD-2025-12840
Malicious code in bioql PyPI...
CVE-2023-53463 ibmvnic: Do not reset dql stats on NON_FATAL err
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Do not reset dql stats on NONFATAL err All ibmvnic resets, make a call to netdevtxresetqueue when re-opening the device. netdevtxresetqueue resets the numqueued and numcompleted byte counters. These stats are used in Byt...
tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball
Impact v3.1.0, v2.1.3, v1.16.5 and below Patches Has been patched in 3.1.1, 2.1.4, and 1.16.6 Workarounds You can use the ignore option to ignore non files/directories. js ignore , header // pass files & directories, ignore e.g. symlinks return header.type !== 'file' && header.type !== 'directory...
Firefox -- Integer overflow in the SVG component
https://bugzilla.mozilla.org/showbug.cgi?id=1980788 reports: Integer overflow in the SVG component...
konsole security update
4.10.5-5.0.1 - Clear the arguments if the command is not found Orabug: 38260855CVE-2025-49091...
Linux Distros Unpatched Vulnerability : CVE-2025-37904
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in btrfsiget BUG There is a bug report that a syzbot reproducer ca...
CVE-2025-38476
In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpldosrhinline. Running lwtdstcacherefloop.sh in selftest with KASAN triggers the splat below 0. rpldosrhinline fetches ipv6hdrskb and accesses it after skbcowhead, which is illegal as the header could ...
CVE-2025-38446
In the Linux kernel, the following vulnerability has been resolved: clk: imx: Fix an out-of-bounds access in dispmixcsrclkdevdata When numparents is 4, clkregister occurs an out-of-bounds when accessing parentnames member. Use ARRAYSIZE instead of hardcode number here. BUG: KASAN:...
CVE-2025-38402
In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning u32 is leading to cast and invalid size value as a result. -EOPNOTSUPP as a size probably will lead to allocation fail. Command: ethto...
