1168 matches found
RLSA-2025:12752 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove CVE-2025-22020 kernel: netsched:...
OSV-2025-698 Use-of-uninitialized-value in AesEncrypt_C
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=442261624 Crash type: Use-of-uninitialized-value Crash state: AesEncryptC wcAesCbcEncrypt Encrypt...
PT-2025-48733
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=442261624 Crash type: Use-of-uninitialized-value Crash state: AesEncrypt C wc AesCbcEncrypt Encrypt...
CVE-2025-9604
A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/encrypt/aes.go. The manipulation of the argument AuthSecretKey/StateSecretKey/OAuthTokenSecretKey leads to use of hard-coded cryptographic key . It is possible ...
CVE-2025-9604: Use of Hard-coded Cryptographic Key
A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/encrypt/aes.go. The manipulation of the argument AuthSecretKey/StateSecretKey/OAuthTokenSecretKey leads to use of hard-coded cryptographic key . It is possible ...
Linux Distros Unpatched Vulnerability : CVE-2023-31566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted. CVE-2023-31566 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2025-54799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library an...
Malicious code in chi-old-encrypt-grep-delta (npm)
The package chi-old-encrypt-grep-delta was found to contain malicious code...
Malicious code in delta-eta-encrypt-node-thread (npm)
The package delta-eta-encrypt-node-thread was found to contain malicious code...
Malicious code in encrypt-layout-helper (npm)
The package encrypt-layout-helper was found to contain malicious code...
Malicious code in enum-beta-java-double-encrypt (npm)
The package enum-beta-java-double-encrypt was found to contain malicious code...
Malicious code in load-book-encrypt-deserialize-permission (npm)
The package load-book-encrypt-deserialize-permission was found to contain malicious code...
Malicious code in star-cold-sudo-encrypt-void (npm)
The package star-cold-sudo-encrypt-void was found to contain malicious code...
Malicious code in encrypt-compile-signal-visualize-root (npm)
The package encrypt-compile-signal-visualize-root was found to contain malicious code...
Malicious code in small-encrypt-orchestrate-star-grid (npm)
The package small-encrypt-orchestrate-star-grid was found to contain malicious code...
MAL-2025-33158 Malicious code in short-root-error-encrypt-boolean (npm)
The package short-root-error-encrypt-boolean was found to contain malicious code...
MAL-2025-25468 Malicious code in load-book-encrypt-deserialize-permission (npm)
The package load-book-encrypt-deserialize-permission was found to contain malicious code...
MAL-2025-19677 Malicious code in enum-beta-java-double-encrypt (npm)
The package enum-beta-java-double-encrypt was found to contain malicious code...