CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-23252

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2025-23252: Internal Asset Exposed to Unsafe Debug Access Level or State

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure...

NVIDIA NVDebug tool 安全漏洞

NVIDIA NVDebug tool is a debugging tool from NVIDIA. A security vulnerability exists in NVIDIA NVDebug tool, which stems from a vulnerability that could allow an attacker to access restricted components, which could lead to information disclosure...

Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

MAL-2025-5004 Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

TencentOS Server 4: java-11-konajdk (TSSA-2024:0587)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0587 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, dynamic-localpv-provisioner, karma, k8ssandra-operator, nri-nginx, neuvector-dbgen, gosu, k8sgpt-operator, skopeo, aws-eks-pod-identity-agent, nri-memcached, nats-server, prometheus-pushgateway, nodetaint, thanos-operator,...

PT-2025-33805

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the BPF JSET conditional jump is not correctly handled during control flow graph CFG computation. This can lead to incorrect live register and...

Malicious code in error-ux-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476bc83dcd99575742060ce7a3f129b15a4da89c0605ae7b4eb57e4cef54bf8b Any computer that has this package installed or running should be considered...

MAL-2025-5032 Malicious code in error-ux-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476bc83dcd99575742060ce7a3f129b15a4da89c0605ae7b4eb57e4cef54bf8b Any computer that has this package installed or running should be considered...

MAL-2025-4925 Malicious code in cockpit-header-icon-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edba84c1a5e3ed1c3b0a0be32d630ab921c73a276543aec3c7c0076379e30e81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in cockpit-header-icon-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

[SECURITY] Fedora 42 Update: qt6-qtconnectivity-6.9.1-1.fc42

Qt6 - Connectivity components...

[SECURITY] Fedora 42 Update: qt6-qtcharts-6.9.1-1.fc42

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

BIT-MARIADB-MIN-2022-32088

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort...

Malicious code in bzl_components-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e9d92ea6bf2f83b7f1ef5fda995c4ca9b06ee0c6e4666b1ac581d884dbae28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Pixel Watch Security Bulletin—June 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2025-06-05 or later address all issues in this bulletin and all issues in the June 2025 Android Security Bulletin. To learn how...

CVE-2025-5866: Improper Validation of Array Index

A vulnerability classified as critical has been found in RT-Thread 5.1.0. This affects the function syssigprocmask of the file rt-thread/components/lwp/lwpsyscall.c. The manipulation of the argument how leads to improper validation of array index...