235 matches found
CVE-2023-53826
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix UAF wear-leveling entry in eraseblkcountseqshow Wear-leveling entry could be freed in error path, which may be accessed again in eraseblkcountseqshow, for example: eraseworker eraseblkcountseqshow wl =...
CVE-2023-53826 ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
In the Linux kernel, the following vulnerability has been resolved: ubi: Fix UAF wear-leveling entry in eraseblkcountseqshow Wear-leveling entry could be freed in error path, which may be accessed again in eraseblkcountseqshow, for example: eraseworker eraseblkcountseqshow wl =...
CVE-2025-40271
In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set the node to EMPTY, which may result in uaf access. We should use RBCLEARNODE set the erased node to EMPTY, then pdesubdirnext will...
Malicious code in @commute/bloom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a8d3f37c021b587ff0a29256071f77c00a9cd9c0ac896a95eadefc849dba2f The package @commute/bloom was found to contain malicious code. Source: ghsa-malware f0fc74d77b27b5b9dd2fea4b44706142694d54536db65dad741286d4c1653ca3...
Google Chrome < 54.0.2840.100 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 54.0.2840.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 201611stable-channel-update-for-desktop9 advisory. - browser/extensions/api/dial/dialregistry.cc in Google Chrome before...
Lexmark Printers Improper Authentication (CVE-2021-44736)
The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the out of service erase feature. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc...
CVE-2025-11256 Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing
The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to upload limited safe files and erase conversatio...
EUVD-2016-4197
Malware in sbrugna...
EUVD-2018-3297
Malware in sbrugna...
EUVD-2013-0968
Malware in sbrugna...
EUVD-2020-18425
Malware in sbrugna...
EUVD-2019-5344
Malware in sbrugna...
EUVD-2016-6153
Malware in sbrugna...
EUVD-2021-31551
Malicious code in bioql PyPI...
EUVD-2022-52518
Malicious code in bioql PyPI...
Blackmagic Design ATEM Mini Pro 安全漏洞
Blackmagic Design ATEM Mini Pro is a live video streaming device from Blackmagic Design, USA. A security vulnerability exists in the Blackmagic Design ATEM Mini Pro version 2.7 that originates from an undocumented Telnet service accepting unauthenticated commands in clear text, which could allow ...
Linux Distros Unpatched Vulnerability : CVE-2025-38372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due t...
MAL-2025-36118 Malicious code in test-mlw2-rimus-tonal-sonse-erase (npm)
The package test-mlw2-rimus-tonal-sonse-erase was found to contain malicious code...