10168 matches found
AlmaLinux 8 : kernel (ALSA-2025:19447)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19447 advisory. kernel: wifi: mac80211: check S1G action frame size CVE-2023-53257 kernel: wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226...
[SECURITY] Fedora 42 Update: qt5-qtwebkit-5.212.0-0.95alpha4.fc42
Qt5 - QtWebKit components...
[SECURITY] Fedora 42 Update: qt5-qtwebengine-5.15.19-2.fc42
Qt5 - QtWebEngine components...
[SECURITY] Fedora 42 Update: qt5-qttools-5.15.18-1.fc42
Qt5 - QtTool components...
[SECURITY] Fedora 42 Update: qt5-qtcharts-5.15.18-1.fc42
Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...
[SECURITY] Fedora 42 Update: qt5-qtconnectivity-5.15.18-1.fc42
Qt5 - Connectivity components...
aimmo (>=2.4.1, <=2.4.3), cfl-common (>=6.12.5, <=6.17.0) +12 more potentially affected by CVE-2025-64459 via django (3.2.14)
django PYPI version 3.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.4.1, =6.12.5, =6.12.5, =1.1.2, =4.3.0rc1, =6.11.1, =5.0.0, =5.4.0 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...
Security update for jasper
This update for jasper fixes the following issues: Update to 4.2.8: CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high bsc1247901. CVE-2025-8836: Added some missing range checking on several coding parameters in the JPC...
Malicious Package
Overview pc-experience-fe-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the url parameter in the /api/images/cache endpoint. An attacker can cause the server to download arbitrary content by supplying a crafted URL. This is only exploitable if the attacker is an...
CVE-2025-43443
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...
Malicious code in pc-experience-fe-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8257ed048a6a07820b94cb55bada5ee260ab483c75647da8c506236aa890e7e5 The package pc-experience-fe-components was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-37539
Malicious code in pc-experience-fe-components npm...
MAL-2025-49342 Malicious code in pc-experience-fe-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8257ed048a6a07820b94cb55bada5ee260ab483c75647da8c506236aa890e7e5 The package pc-experience-fe-components was found to contain malicious code. Source: ghsa-malware...
[SECURITY] Fedora 43 Update: unbound-1.24.1-1.fc43
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
The vulnerability of the Media components in Google Chrome and Microsoft Edge allows attackers to enhance their privileges.
The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Unspecified Vulnerability in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 (CNVD-2025-29087)
The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4, which is caused by the use of vulnerable...
Malicious code in epic-diesel-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c845610e9f2b712b89218940faed5b186517dacfde23d4dda9d95833b3cdb9a4 The package epic-diesel-components was found to contain malicious code...
Malicious code in epic-ue-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be8aaeadc65eecac5d97a903d0ab829cbce32f8b021d50552e1d584a5329237 The package epic-ue-components was found to contain malicious code...