1619 matches found
CVE-2025-40204
In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
CVE-2025-40204 sctp: Fix MAC comparison to be constant-time
In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
Malicious code in teate-thy-sonic-logacu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b34bbb3f19787209c8e220ecd4bc18d0ec252a62d06ca97fcaca479a3e57ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuilva-dare-ogoigadaf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7148b214527ac3a555b4ea2d2ce49d4c1967e4e34022ebec4afa37f3a949a3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-175628 Malicious code in ksai-kil-koki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1ed36bf7ffee710d9cfc80e9ffcc0e80625ee4f1a83d27149346aa7e91d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-161956 Malicious code in nasrul-poke64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ea95a5a8310c6b0291a9cd3afc2312d3a7fbc151c527096afc7c417020e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
kernel: ipv6: sr: Fix MAC comparison to be constant-time
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
Moderate: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
kernel: ipv6: sr: Fix MAC comparison to be constant-time
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
kernel: ipv6: sr: Fix MAC comparison to be constant-time
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
kernel: ipv6: sr: Fix MAC comparison to be constant-time
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...
MAL-2025-143973 Malicious code in json-figures-gatsby-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f0f17392b56d80f72cd5d178af7fead25d375c34ebf71364de580a8bc05822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pyxis-webdriver-manager-colors-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7046db12c93f852d9af106f281fac38327ff8b7cf8e3aa505fcd91ccefda5b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in astro-lynx-spectron-webdriver-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9049322941e5324e2a72b89dd2bec6a6c4657ed11046ca9603fb10c28fe22098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a MAC comparison of non-constant time, which could lead to a timing attack...
RHEL 9 : kernel (RHSA-2025:21112)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21112 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: firmware: armscpi: Ensure...
RHEL 10 : kernel (RHSA-2025:21118)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21118 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: dochangetype: refuse to...
