6040 matches found
kernel: Linux kernel: Denial of service due to use-after-free in scsi: lpfc
A flaw was found in the Linux kernel's scsi: lpfc component. This vulnerability involves a use-after-free error in the devlosstmocallbk function. During driver unload or fatal error handling, a previously freed object could be accessed. This could allow a local attacker to cause a system crash,...
PT-2026-24102
Name of the Vulnerable Software and Affected Versions FreshRSS versions prior to 1.27.2-dev Description FreshRSS, a self-hostable RSS aggregator, contains a flaw related to password verification. A change in the length of the nonce, from 40 to 64 characters between commits 57e1a37 and 00f2f04,...
Cross-site Scripting (XSS)
Astro is vulnerable to Cross Site Scripting XSS. The vulnerability is due to a Reflected Cross-Site Scripting XSS vulnerability in Astro's development server error pages when the trailingSlash configuration option is used, where an attacker can inject arbitrary JavaScript code that executes in th...
Malicious Package
Overview tether-dev-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in tether-dev-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d07b28a3afe4c020244ad7d5415342f3d62c4436107a5d764307d102b193ef The package tether-dev-docs was found to contain malicious code. Source: ghsa-malware 57a6db50523e4b656bdec519331a0443d43f1f9ae2dd91e5e1a1ee5ab6cc5ed...
MAL-2026-1258 Malicious code in tether-dev-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d07b28a3afe4c020244ad7d5415342f3d62c4436107a5d764307d102b193ef The package tether-dev-docs was found to contain malicious code. Source: ghsa-malware 57a6db50523e4b656bdec519331a0443d43f1f9ae2dd91e5e1a1ee5ab6cc5ed...
PT-2026-39116
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mctp flow prepare output function. The function checks key-dev and may call mctp dev set key without holding the key-lock, despite the latter being intende...
The vulnerability of the dev_fill_forward_path() function in the net/core/dev.c module, which supports kernel network functions in the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the devfillforwardpath function in the net/core/dev.c module, which is part of Linux’s kernel-based networking functions, involves insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pci_dev_lock() function in the drivers/pci/pci.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.
The vulnerability of the pcidevlock function in the drivers/pci/pci.c module of the Linux operating system’s device support driver for PCI devices is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the skbchecksum_help() function in the net/core/dev.c module, which supports networking functions of the Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the skbchecksumhelp function in the net/core/dev.c module, which is part of Linux’s kernel-based networking functions, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-66944
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005730)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005730 advisory. In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler,...
EUVD-2025-208283
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...
CVE-2025-66944
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...
Security Bulletin: Source Code Exposure Vulnerability in webpack-dev-server (Fixed in Version 5.2.1) affects watsonx.data
Summary webpack-dev-server versions prior to 5.2.1 are vulnerable to source code exposure when users visit a malicious website. Due to classic script requests not being restricted by the same-origin policy, an attacker who knows the dev server port and entry script path can inject a script, acces...
SUSE CVE-2026-23633
Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via path traversal in Git hook editing. This issue has been patched in versions 0.13.4 and 0.14.0+dev...
CVE-2025-66944
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...
CVE-2025-66944: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...
