Malicious Package

Overview dolyame-boxy-atom-bnpl-dolyame-button is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview dolyame-boxy-atom-bnpl-store-button-set is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

Malicious Package

Overview dolyame-boxy-mobile-bnpl-button-set is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

CVE-2026-48537

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...

CVE-2026-64013

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI button driver. This vulnerability occurs because the ACPI General Purpose Event GPE handler is not properly removed when the driver is unloaded. An attacker could potentially trigger an ACPI notify event on a...

SUSE CVE-2026-63943

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...

SUSE CVE-2026-64013

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...

Linux Distros Unpatched Vulnerability : CVE-2026-64013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee ACPI: button:...

CVE-2026-64013

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...

CVE-2026-63943

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...

CVE-2026-64013 ACPI: button: Fix ACPI GPE handler leak during removal

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...

CVE-2026-64013

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...

CVE-2026-64013 ACPI: button: Fix ACPI GPE handler leak during removal

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...

CVE-2026-64013

A memory leak in the acpi_button_remove() function of the Linux kernel's ACPI drivers allows an attacker to potentially compromise the integrity of protected information or cause system failures. The issue stems from a change in the notify handler type for ACPI buttons to ACPI_ALL_NOTIFY , which ...

EUVD-2026-45586

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...

CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...

CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...

EUVD-2026-45716

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...

CVE-2026-63943

The CVE-2026-63943 entry concerns the Linux kernel driver for the xpad (gamepad) device. It describes an out-of-bounds access in xpadone_process_packet(), which uses urb->actual_length as an index to the share-button byte (data[len-18] or data[len-26]); with len and data[0] under the device’s ...

CVE-2026-63943

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...