CVE-2025-38418

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc-cleantable after rprocattach fails When rproc-state = RPROCDETACHED is attached to remote processor through rprocattach, if rprochandleresources returns failure, then the clean table should be...

CVE-2025-31955

creationtimestamp| type| source ---|---|--- 2025-07-24 21:40:18+00:00| seen| Telegram/Epk51imlWNQwvFQRKl877jcE3J7nzmk-LsJImIJN1ZwezWE...

CVE-2025-31952

creationtimestamp| type| source ---|---|--- 2025-07-24 21:40:17+00:00| seen| Telegram/uNJ1koXpEvE9NRYOBvH5HVO3jJXTYkWlpamI9kj4P07xU...

CVE-2024-5154

creationtimestamp| type| source ---|---|--- 2025-07-24 13:36:22+00:00| seen| Telegram/GCTI22YP1CSYMpL-V3OiPdnPXzKD3Fjy8IUdp0zDr1mxfY...

CVE-2024-53286

creationtimestamp| type| source ---|---|--- 2025-07-23 04:34:33+00:00| seen| Telegram/8ciReg4XgtxU0DdOSBqBxWkKPmZ0YyveWaK086BwK-Kd0...

Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

MAL-2025-6128 Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

CVE-2025-36057

creationtimestamp| type| source ---|---|--- 2025-07-21 18:34:27+00:00| seen| Telegram/f69C7OYqpUjl176j50OorOLaQen3qAEtfPE0R-rAiQLw...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Siemens SICAM TOOLBOX II Trust Management Issue Vulnerability (CNVD-2025-16621)

Siemens SICAM TOOLBOX II is an engineering software from Siemens, Germany. A trust management issue vulnerability exists in Siemens SICAM TOOLBOX II that stems from a common name not being checked for device certificates, which could be exploited by an attacker to cause a man-in-the-middle attack...

CVE-2025-7906 yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1 and classified as critical. This issue affects the function uploadFile of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java. The manipulation of the argument File leads to unrestricted upload. The...

Important: Red Hat Security Advisory: OpenJDK 8u462 Windows Security Update

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

...

SUSE CVE-2025-50059

unknown...

CVE-2025-50105

creationtimestamp| type| source ---|---|--- 2025-07-16 14:28:53+00:00| seen| Telegram/i5WZsZh0E1S8me1aEhPBtRc8vbBlbPHuTG37D0VBAuAnD3U...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via specific endpoints. An attacker can make the system initiate arbitrary network requests to internal or external resources by sending crafted requests to these endpoints. Remediation There is no fixed...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force via the login process. An attacker can gain unauthorized access or disrupt service by repeatedly attempting authentication without restriction. Remediation There is no fixed version for...

CVE-2024-30097

creationtimestamp| type| source ---|---|--- 2025-07-16 01:25:01+00:00| seen| Telegram/PBbYKt1y6ixGQJqhgwJdVOnlFY7avmF76xG-9PpFBStMQE...

Malicious code in @gdcorp-digitalcare/ux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fecefb3206cce5d5e5a87c2c7130d9cffdb74d4b163ca1bc8e14cedd902ae6b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angieslist-office-app-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef02b48854bea0c3c7e012377ff6e37a2ca9b371c56552ac87a3ec84a8ec098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...