1530 matches found
CVE-2025-47913
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
CVE-2025-47913
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
UBUNTU-CVE-2025-47913
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
UBUNTU-CVE-2025-40147
In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On repeated cold boots we occasionally hit a NULL pointer crash in blkshouldthrotl when throttling is consulted before the throttle policy is fully enabled for the...
CVE-2025-40167
An issued CVE (CVE-2025-40167) affects the Linux kernel ext4 implementation where an inode incorrectly has both INLINE_DATA and EXTENTS flags set. Connected sources describe the root cause: the combination causes ext4_has_inline_data() to return true, causing the extent-tree validation to be skip...
CVE-2025-40147 blk-throttle: fix access race during throttle policy activation
In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On repeated cold boots we occasionally hit a NULL pointer crash in blkshouldthrotl when throttling is consulted before the throttle policy is fully enabled for the...
Linux Distros Unpatched Vulnerability : CVE-2025-40147
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-throttle: fix access race during throttle policy activation On repeated cold boots we occasionally hit a NULL pointer crash in blkshouldthrotl when...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990848)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990848 advisory. In the Linux kernel, the following vulnerability has been resolved: virtiopmem: Check device status before requesting flush If a pmem device is in a bad status, the...
Malicious code in early_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8312ccd88140f4df3c550d05a635504bdd7245cad8ee52a74e30773e270a605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-61842 Format Plugins | Use After Free (CWE-416)
Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs
In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...
EUVD-2025-79362
Malicious code in earlycrowz3n npm...
EUVD-2025-79361
Malicious code in earlydinosaurz3n npm...
MAL-2025-101852 Malicious code in early_dinosaur_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481a627a68d383fed90fa07d5d5b3d15b6de15169e9843cc52807980ef464db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in early_catfish_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-82119
Malicious code in earlycattlereplicateautomation npm...
EUVD-2025-82120
Malicious code in earlycatfish0xrequest npm...
EUVD-2025-86404
Malicious code in earlydragonflyz3n npm...
MAL-2025-84820 Malicious code in early_gecko_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05256447f0c3c451d1a4fe31897c8d83d688ae44e93f36a4f65633224652823d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...