CLSA-2025-1758892974 php: Fix of CVE-2017-9228

CVE-2017-9228: fix heap out-of-bounds write in bitsetsetrange and parsecharclass functions...

CVE-2022-50282

CVE-2022-50282: Linux kernel vulnerability in chardev handling where error paths in cdev_device_add() could leave kobject state inconsistent during fault injection tests. Connected advisories (Unity Linux UTSA entries and related EulerOS/SUSE notices) confirm the issue and describe the fix as add...

CVE-2025-58750

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 0cc348b are missing a bound check in chclifparsemoveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed i...

Linux Distros Unpatched Vulnerability : CVE-2020-25725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an...

Linux Distros Unpatched Vulnerability : CVE-2021-46965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to...

CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

Malicious code in string-book-char-protected-deploy (npm)

The package string-book-char-protected-deploy was found to contain malicious code...

Malicious code in wind-interface-error-sed-char (npm)

The package wind-interface-error-sed-char was found to contain malicious code...

Malicious code in char-scale-string-object-hot (npm)

The package char-scale-string-object-hot was found to contain malicious code...

Malicious code in mock-uglify-short-char-catch (npm)

The package mock-uglify-short-char-catch was found to contain malicious code...

Malicious code in pipe-hash-minify-thread-char (npm)

The package pipe-hash-minify-thread-char was found to contain malicious code...

Malicious code in process-char-rho-analyze-bad (npm)

The package process-char-rho-analyze-bad was found to contain malicious code...

MAL-2025-29679 Malicious code in process-char-rho-analyze-bad (npm)

The package process-char-rho-analyze-bad was found to contain malicious code...

MAL-2025-39307 Malicious code in wind-interface-error-sed-char (npm)

The package wind-interface-error-sed-char was found to contain malicious code...

MAL-2025-26584 Malicious code in mock-uglify-short-char-catch (npm)

The package mock-uglify-short-char-catch was found to contain malicious code...

MAL-2025-16792 Malicious code in char-scale-string-object-hot (npm)

The package char-scale-string-object-hot was found to contain malicious code...

MAL-2025-34093 Malicious code in string-book-char-protected-deploy (npm)

The package string-book-char-protected-deploy was found to contain malicious code...

MAL-2025-32667 Malicious code in sandbox-thread-easy-char-chi (npm)

The package sandbox-thread-easy-char-chi was found to contain malicious code...

MAL-2025-19883 Malicious code in eta-reject-fork-char-cat (npm)

The package eta-reject-fork-char-cat was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2021-29266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v-configctx has an invalid value upon re-opening a...