6072 matches found
CVE-2025-38555
In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in compositedevcleanup 1. In func configfscompositebind - compositeosdescreqprepare: if kmalloc fails, the pointer cdev-osdescreq will be freed but not set to NULL. Then it will return a failure t...
Linux Distros Unpatched Vulnerability : CVE-2022-1222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV. CVE-2022-1222 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2025-8264
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inje...
Linux Distros Unpatched Vulnerability : CVE-2023-39070
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934. CVE-2023-39070 Note tha...
Malicious code in tiktok-dev (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6963 Malicious code in tiktok-dev (npm)
The package communicates with a domain associated with malicious activity...
AZL-66356 CVE-2025-38542 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtrcreate When updating an existing route entry in atrtrcreate, the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix...
AZL-66377 CVE-2025-38513 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer dereference in zdmactxtodev There is a potential NULL pointer dereference in zdmactxtodev. For example, the following is possible: T0 T1 zdmactxtodev / len == skbqueuelenq / while len...
Linux Distros Unpatched Vulnerability : CVE-2025-21769
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclockmiscdevfops Without the .owner field, the module can be...
Linux Distros Unpatched Vulnerability : CVE-2020-15436
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging...
SUSE CVE-2025-55199
Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...
Malicious code in makerjs-dev (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @ginger-dev/eslint-config (npm)
The package @ginger-dev/eslint-config was found to contain malicious code...
Malicious code in @leaffm/leaf-connect-indu-dev-store (npm)
The package @leaffm/leaf-connect-indu-dev-store was found to contain malicious code...
Malicious code in @zalastax/nolb-dev (npm)
The package @zalastax/nolb-dev was found to contain malicious code...
Malicious code in @zalastax/nolb-dev- (npm)
The package @zalastax/nolb-dev- was found to contain malicious code...
Malicious code in dev-test (npm)
The package dev-test was found to contain malicious code...
Malicious code in fusion-dev-cli (npm)
The package fusion-dev-cli was found to contain malicious code...