107 matches found
MAL-2025-17236 Malicious code in coalesce-generic (npm)
The package coalesce-generic was found to contain malicious code...
MAL-2025-26621 Malicious code in moltin-coalesce (npm)
The package moltin-coalesce was found to contain malicious code...
MAL-2025-17235 Malicious code in coalesce-core (npm)
The package coalesce-core was found to contain malicious code...
MAL-2025-26622 Malicious code in moltin-coalesce-generic (npm)
The package moltin-coalesce-generic was found to contain malicious code...
MAL-2025-17239 Malicious code in coalesce-utils (npm)
The package coalesce-utils was found to contain malicious code...
MAL-2025-17238 Malicious code in coalesce-moltin (npm)
The package coalesce-moltin was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2020-12771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 5.6.11. btreegccoalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails...
Linux Distros Unpatched Vulnerability : CVE-2021-47556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ethtool: ioctl: fix potential NULL deref in ethtoolsetcoalesce ethtoolsetcoalesce now uses...
The vulnerability of the ethtool_set_coalesce() function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions allows a hacker to cause a service failure.
The vulnerability of the ethtoolsetcoalesce function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-29012
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to memory access within the ath12k driver. Specifically, in the ath12k dp rx msdu coalesce function, a use-after-free error can occur. This...
CVE-2025-21939
CVE-2025-21939 affects the Linux kernel DRM: XEHmm code path. The root cause is dereference of struct page pointers obtained from hmm_range_fault() without holding the notifier lock (and with an invalid/unstable seqno), risking access to pages not owned by the kernel during sg-table construction....
The vulnerability of the `tcp_can_coalesce_send_queue_head()` function in the `net/ipv4/tcp_output.c` module of the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the tcpcancoalescesendqueuehead function in the net/ipv4/tcpoutput.c module of the Linux kernel is associated with code errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
DEBIAN-CVE-2022-49142
In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...
DEBIAN-CVE-2022-49093
In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...
UBUNTU-CVE-2022-49142
In the Linux kernel, the following vulnerability has been resolved: net: preserve skbendoffset in skbunclonekeeptruesize syzbot found another way to trigger the infamous WARNONONCEdelta truesize value, we also need to make sure TCP wont fill new tailroom that pskbexpandhead was able to get from a...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview twig/twig is a flexible, fast, and secure template language for PHP. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' due to improper handling of the null coalesce operator ??. This is...
Twig security issue where escaping was missing when using null coalesce operator
When using the ?? operator, output escaping was missing for the expression on the left side of the operator...
GHSA-3XG3-CGVQ-2XWR Twig security issue where escaping was missing when using null coalesce operator
When using the ?? operator, output escaping was missing for the expression on the left side of the operator...
CVE-2025-24374 Twig fixes a security issue where escaping was missing when using null coalesce operator (??)
Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the left side of the operator. This vulnerability is fixed in 3.19.0...
