CVE-2026-45911

A flaw was found in the Linux kernel's Cadence Design Systems USB3 cdns3 driver. During system resume, if the USB role is switched to host mode, the driver attempts to access an uninitialized device, leading to a NULL pointer dereference. This can be exploited by a local user to cause a system...

The vulnerability of Intel Quartus Prime Pro operating system-based automated design systems relates to an uncontrolled search path element, which allows a malicious individual to escalate their privileges.

The vulnerability of Intel Quartus Prime Pro operating system-based automated design systems relates to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cadence Design Systems GUI Security Vulnerability

Cadence Design Systems GUI is a Graphical User Interface GUI from Cadence Design Systems, Inc. to support its suite of Electronic Design Automation EDA software tools. A security vulnerability exists in Cadence Design Systems GUI version 0.9.2 and prior versions, which stems from the use of an...

Cadence Design Systems GUI Security Vulnerability

Cadence Design Systems GUI is a Graphical User Interface GUI from Cadence Design Systems, Inc. to support its suite of Electronic Design Automation EDA software tools. A security vulnerability exists in Cadence Design Systems GUI version 0.9.2 and prior versions, which stems from the use of an...

Malicious code in @dsgn-sys/editor-elements-design-systems (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9980278b42c7d17f8bdcd55bb8d9c2151f45e6948b1170085a634393a027eeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-728 Malicious code in @wix-ui/editor-elements-design-systems (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5c8d828f9016869c3426ca1f4d4aefe7d14e402feb469e95f1776f8c7b8a5ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@across-ui/example (>=0.0.1-alpha.4 <=0.0.4-alpha.5), @agreejs/api (>=0.0.1 <=3.2.14) +752 more potentially affected by CVE-2020-28500 via lodash-es (>=4.0.0 <=4.17.20)

lodash-es NPM version =4.0.0, =0.0.1-alpha.4, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.1.0, =0.3.14, =0.4.63, =0.4.64 and more Source cves: CVE-2020-28500 Source advisory: OSV:GHSA-29MW-WPGM-HMR9...

@astro-my/design-systems (>=0.3.14 <=0.4.42), @astro-my/design-systems-aw (>=0.4.63 <=0.4.64) +143 more potentially affected by CVE-2019-10744 via lodash-es (>=3.0.0 <=4.17.12)

lodash-es NPM version =3.0.0, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 - @astro-my/design-systems-xuan-ts =0.1.1 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

@astro-my/design-systems (>=0.3.14 <=0.4.42), @astro-my/design-systems-aw (>=0.4.63 <=0.4.64) +97 more potentially affected by CVE-2019-10744 via lodash-es (>=4.0.0 <=4.17.11)

lodash-es NPM version =4.0.0, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 - @astro-my/design-systems-xuan-ts =0.1.1 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASHES-2434290...

The vulnerabilities of Intel Quartus Prime and Intel Quartus II automated design systems stem from deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime and Intel Quartus II automated design systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

US-CERT Warns of Crypto Bugs in IEEE Standard

Recent academic work focused on weak cryptographic protections in the implementation of the IEEE P1735 standard has been escalated to an alert published Friday by the Department of Homeland Security. DHS’ US-CERT warned the IEEE P1735 standard for encrypting electronic-design intellectual propert...