9971 matches found
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling CVE-2022-50053 In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobjectput is safe for module type kobjects CVE-2025-37995 In the Linux kernel,...
The vulnerability in the driver/misc/mei/vsc-tp.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drivers/misc/mei/vsc-tp.c component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fs/netfs component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the fs/netfs component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the iommu_copy_struct_from_user() function in the iommu component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the iommucopystructfromuser function in the iommu component of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-44103
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of uinput devices. Specifically, the uinput ff upload compat structure was not properly initialized, potentially leading to...
The vulnerability of the op_init_lcd_dma() function in the lcd_dma.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the opinitlcddma function in the lcddma.c component of the Linux kernel relates to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Linux Kernel. A local attacker could exploit this vulnerability to cause a denial of service Vulnerability Details IBM X-Force ID: 383938 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused ...
Security Bulletin: Vulnerabilities in Bouncy Castle, Eclipse JGit and Node.js diff might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Bouncy Castle, Eclipse JGit and Node.js diff. Vulnerabilities include vulnerable to padding oracle attack, allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistic...
Security Bulletin: Vulnerabilities in Jettison, Hawk and tim-newlines might affect IBM Storage Defender Copy Data Management.
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Jettison, Hawk and tim-newlines. Vulnerabilities include causing a denial of service attack, causing a Denial of Service DoS via crafted JSON data, allows attackers to cause a Denial of Service DoS via a craft...
Security Bulletin: Vulnerabilities in Apache Tomcat and form-data might affect IBM Storage Defender Copy Data Management.
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Apache Tomcat and form-data. Vulnerabilities include a memory leak which result in a denial of service, possible for a specially crafted request to bypass some rewrite rules which could be bypassed security...
Malicious Package
Overview postmark-mcp is a malicious package. This is an MCP Model Context Protocol server intended to let AI assistants send emails via Postmark and it was reportedly modified to secretly exfiltrate email contents by adding a blind-copy BCC to an external domain. Note: If you have installed or...
Malicious code in postmark-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security b71142d16d8ed2a6e96b93be35b1378bad054d735c90ce0ab7b20979a8c40ba4 This package turned malicious in v1.0.16 and exfiltrates email data via BCC...
MAL-2025-47604 Malicious code in postmark-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security b71142d16d8ed2a6e96b93be35b1378bad054d735c90ce0ab7b20979a8c40ba4 This package turned malicious in v1.0.16 and exfiltrates email data via BCC...
The vulnerability in the function gdk_pixbuf__jpeg_image_load_increment() in the file glib/gbase64.c of the GdkPixbuf image loading library allows a attacker to execute arbitrary code and cause a denial-of-service attack.
The vulnerability of the gdkpixbufjpegimageloadincrement function in the glib/gbase64.c file of the GdkPixbuf library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely an...
kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...
Linux Distros Unpatched Vulnerability : CVE-2025-39872
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hsr: hold rcu and dev lock for hsrgetportndev hsrgetportndev calls hsrforeachport, which need to hold rcu lock. On the other hand, before return the port device...
CVE-2025-57941
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JonathanMH Append Link on Copy append-link-on-copy allows Stored XSS.This issue affects Append Link on Copy: from n/a through = 0.2...
