CVE-2024-11602: Origin Validation Error

A Cross-Origin Resource Sharing CORS vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can bypass intended security...

The vulnerability of the `__sev_snp_shutdown_locked()` function in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the sevsnpshutdownlocked function in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-16759

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc6-syzkaller-00103-g4003c9e78778 Description A vulnerability in the Linux kernel has been resolved, related to the initialization of wiphy work before allocating rfkill. If rfkill allocation fails, the...

Malicious code in dev-debugger-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 836268a49761be0bbcd6dd89283cbaceea33d8ddf28b8fec0ca5337c318eba52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2372 Malicious code in dev-debugger-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 836268a49761be0bbcd6dd89283cbaceea33d8ddf28b8fec0ca5337c318eba52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-20533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the Linux kernel's USB gadget functionality, specifically in the ast vhub init dev function. The variable d-name, returned by devm...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.19.0 release

Red Hat OpenShift Dev Spaces 3.19 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

btrfs: don't take dev_replace rwsem on task already holding it

...

AZL-58515 CVE-2025-21858 affecting package kernel for versions less than 6.6.82.1-1

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in genevefinddev. syzkaller reported a use-after-free in genevefinddev 0 without repro. geneveconfigure links struct genevedev.next to netgenericnet, genevenetid-genevelist. The net here could differ fr...

DEBIAN-CVE-2025-21858

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in genevefinddev. syzkaller reported a use-after-free in genevefinddev 0 without repro. geneveconfigure links struct genevedev.next to netgenericnet, genevenetid-genevelist. The net here could differ fr...

UBUNTU-CVE-2025-21858

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in genevefinddev. syzkaller reported a use-after-free in genevefinddev 0 without repro. geneveconfigure links struct genevedev.next to netgenericnet, genevenetid-genevelist. The net here could differ fr...

Malicious code in customer-identity-mfe-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f4bceaecd0bf3f0387bb417a86c4c6e4f53764a6a38ce58717d12c68b024cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2289 Malicious code in customer-identity-mfe-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f4bceaecd0bf3f0387bb417a86c4c6e4f53764a6a38ce58717d12c68b024cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-10608

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue is related to a possible out of bounds read in the tipc dev ql due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileg...

PT-2025-10075

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the priorities info variable is uninitialized. This uninitialized value is then copied to a user object when the PANTHOR UOBJ SET...

PT-2025-9965

Name of the Vulnerable Software and Affected Versions ChestnutCMS versions up to 1.5.2 Description A critical issue has been discovered that affects the uploadFile function of the /dev-api/cms/file/upload API endpoint. The manipulation of the file argument leads to unrestricted upload. This issue...

CVE-2025-2031: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2. This affects the function uploadFile of the file /dev-api/cms/file/upload. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

Linux Distros Unpatched Vulnerability : CVE-2021-40978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the...

The vulnerability of the /api/dev-console/proxy/internet file on the Red Hat OpenShift Container Platform corporate platform allows a attacker to perform an SSRF attack.

The vulnerability of the /api/dev-console/proxy/internet file on the Red Hat OpenShift Container Platform corporate platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Linux Distros Unpatched Vulnerability : CVE-2022-43045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfdumpvrmlsffield at /scenemanager/scenedump.c...