114 matches found
CVE-2026-1229
The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3...
PT-2026-21672
Name of the Vulnerable Software and Affected Versions circl versions prior to 1.6.3 Description The CombinedMult function within the ecc/p384 package secp384r1 curve calculates an incorrect value for certain inputs. This issue does not affect ECDH and ECDSA signing operations that rely on this...
SUSE CVE-2026-23202
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transf...
CVE-2026-23202
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transf...
UBUNTU-CVE-2026-23202
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transf...
EUVD-2026-5842
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transf...
CVE-2026-23202 spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transf...
CVE-2026-23202
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transf...
CVE-2026-23202 spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transf...
CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar Farms
CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat and power plant CHP supplying heat to almost half a million customers in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001822)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001822 advisory. The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allow...
EUVD-2025-106039
Malicious code in combinedlampreyz3n npm...
EUVD-2025-77666
Malicious code in combinedpossumteal-90 npm...
MAL-2025-100701 Malicious code in combined_heron_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a52e4ce2ee1ef885651335735768e6f4f2a24a458487d51317c91f71111b4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-64913
Malicious code in combinedboarz3n npm...
MAL-2025-93641 Malicious code in combined_boar_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59698703713aaf0294020b01c128d79cce956db485be293b1a4c59cda543d27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-64912
Malicious code in combinedcatfishz3n npm...
EUVD-2025-55336
Malicious code in combined-yellow-dingo npm...