DEBIAN-CVE-2025-38507

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: avoid bluetooth suspend/resume stalls Ensure we don't stall or panic the kernel when using bluetooth-connected controllers. This was reported as an issue on android devices using kernel 6.6 due to the resume hook...

CVE-2025-38507 HID: nintendo: avoid bluetooth suspend/resume stalls

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: avoid bluetooth suspend/resume stalls Ensure we don't stall or panic the kernel when using bluetooth-connected controllers. This was reported as an issue on android devices using kernel 6.6 due to the resume hook...

CVE-2025-27846

In ESPEC North America Web Controller 3 before 3.3.8, an attacker with physical access can gain elevated privileges because GRUB and the BIOS are unprotected...

CVE-2025-27845

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...

CVE-2025-27847

In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout...

CAN Networks Security in Smart Grids Communication Technologies

The rapid evolution of smart grids requires effective communication protocols to transfer data reliably and securely. Controller Area Network CAN is one of the most recognized protocols that offer reliable data transmission in smart grids due to its robustness, real-time capabilities, and...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kubescape, eksctl, istio, flux-source-controller, cilium-cli, tw, helm-docs, cluster-api-helm-controller, rancher-fleet, chartmuseum, trivy, zarf, k9s, linkerd2, kargo, kots, k8sgpt, zot, flux-helm-controller, helm-operator, trivy-operator, envoy-gateway,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kubescape, eksctl, istio, flux-source-controller, cilium-cli, helm-docs, cluster-api-helm-controller, rancher-fleet, chartmuseum, trivy, zarf, k9s, linkerd2, kargo, kots, k8sgpt, zot, flux-helm-controller, helm-operator, trivy-operator, envoy-gateway, helm-set-status...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: kubescape, eksctl, istio, flux-source-controller, cilium-cli, helm-docs, cluster-api-helm-controller, rancher-fleet, chartmuseum, trivy, zarf, k9s, linkerd2, kargo, kots, k8sgpt, zot, flux-helm-controller, helm-operator, trivy-operator, envoy-gateway, helm-set-status...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: kubescape, eksctl, istio, flux-source-controller, cilium-cli, tw, helm-docs, cluster-api-helm-controller, rancher-fleet, chartmuseum, trivy, zarf, k9s, linkerd2, kargo, kots, k8sgpt, zot, flux-helm-controller, helm-operator, trivy-operator, envoy-gateway,...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible crash of the nintendo bluetooth controller during hang recovery, which could lead to a kernel pan...

CVE-2025-45315

A cross-site scripting XSS vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the email parameter...

Linux Distros Unpatched Vulnerability : CVE-2024-35816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: prevent leak of left- over IRQ on unbind Commit 5a95f1ded28691e6 firewire:...

Linux Distros Unpatched Vulnerability : CVE-2024-35978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hcireqsynccomplete In 'hcireqsynccomplete', always free the...

Malicious code in dbenvy-ci-controller-client (npm)

The package dbenvy-ci-controller-client was found to contain malicious code...

MAL-2025-18096 Malicious code in dbenvy-ci-controller-client (npm)

The package dbenvy-ci-controller-client was found to contain malicious code...

MAL-2025-12661 Malicious code in @zalastax/nolb-node-red-contl (npm)

The package @zalastax/nolb-node-red-contl was found to contain malicious code...

CVE-2025-8965

A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...

CVE-2025-8310

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...

CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload

A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...