24601 matches found
RHSA-2025:1917
creationtimestamp| type| source ---|---|--- 2025-09-25 17:54:46+00:00| seen| Telegram/LauEJH8XtyvIR8Jsw9hJgU55K19UrIz3P1NwYRmy9ZMAio...
CVE-2014-0789
creationtimestamp| type| source ---|---|--- 2025-09-25 17:54:32+00:00| seen| Telegram/1qX3cFaohEHNv3oYLj3BrAuSBwX2kptpdRBzXVQdZsUE...
CERTFR-2025-ALE-013
creationtimestamp| type| source ---|---|--- 2025-09-25 17:34:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115266136468526536...
CVE-2025-27261
creationtimestamp| type| source ---|---|--- 2025-09-25 14:55:23+00:00| seen| Telegram/yVxd3bsFxEulMEdPzN5SDwA78DgvBGmEzhWw7DlS2fHVEs...
CVE-2025-10467
creationtimestamp| type| source ---|---|--- 2025-09-25 13:53:17+00:00| seen| Telegram/1HzC-b87mAdUhvVO2CitKYtKZwe7MGoH-34LId2PsHVnJ0...
Information Disclosure
github.com/neuvector/neuvector is vulnerable to information disclosure. The vulnerability is due to passwords in Java command parameters being logged in security event logs when a process rule violation occurs, which allows an attacker to obtain sensitive credentials...
Malicious Package
Overview @sev-ui-verse/event-bus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
MAL-2025-47534 Malicious code in @sev-ui-verse/event-bus (npm)
The package @sev-ui-verse/event-bus was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e7a58185f216b62d263ee5e9e75c527755dab55a83fcaf06401463b8bccabc Any computer that has this package installed or running should be considered ful...
Malicious code in @sev-ui-verse/event-bus (npm)
The package @sev-ui-verse/event-bus was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e7a58185f216b62d263ee5e9e75c527755dab55a83fcaf06401463b8bccabc Any computer that has this package installed or running should be considered ful...
Malicious Package
Overview @sev-ui-verse/event-tracking is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in @sev-ui-verse/event-tracking (npm)
The package @sev-ui-verse/event-tracking was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456d3a4ed1bb864eafcf6a65c30be392f9dc9ac1342ab0c1cd51cc463f11ff7f Any computer that has this package installed or running should be considere...
CVE-2025-5717
An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...
Bluetooth: hci_event: Ignore multiple conn complete events
...
kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...
kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check...
CVE-2021-1132
creationtimestamp| type| source ---|---|--- 2025-09-25 00:36:28+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...
WordPress Plugin CP Multi View Event Calendar Authorization Missing Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An authorization missing vulnerability exists in the WordPress plugin CP Multi View Event...
Linux Distros Unpatched Vulnerability : CVE-2025-39886
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the...
SUSE CVE-2025-39890
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...