SUSE CVE-2025-38650

In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutexlock check in hfsplusfreeextents Syzbot reported an issue in hfsplus filesystem: ------------ cut here ------------ WARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346 hfsplusfreeextents+0x700/0xad0 Call...

CVE-2025-38650

In the Linux kernel, the following vulnerability has been resolved: hfsplus: remove mutexlock check in hfsplusfreeextents Syzbot reported an issue in hfsplus filesystem: ------------ cut here ------------ WARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346 hfsplusfreeextents+0x700/0xad0 Call...

Linux Distros Unpatched Vulnerability : CVE-2024-38439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in...

CVE-2025-54175

QuickCMS.EXT is affected by a Reflected XSS in the sFileName parameter of the thumbnail viewer. The issue allows arbitrary JavaScript execution via a crafted URL. Only version 6.8 has been tested and confirmed vulnerable; other versions may also be affected. The vendor was notified but did not pr...

PT-2025-34052

Name of the Vulnerable Software and Affected Versions: QuickCMS.EXT version 6.8 QuickCMS.EXT affected versions not specified Description: QuickCMS.EXT is susceptible to a Reflected Cross-Site Scripting XSS issue within the thumbnail viewer functionality. An attacker can create a malicious URL tha...

CVE-2025-9165 LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak

A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is...

CVE-2025-38522: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent updatelockedrq calls with NULL rq Avoid invoking updatelockedrq when the runqueue rq pointer is NULL in the SCXCALLOP and SCXCALLOPRET macros. Previously, calling updatelockedrqNULL with preemption enabled coul...

Malicious code in @zalastax/nolb-_ext- (npm)

The package @zalastax/nolb-ext- was found to contain malicious code...

Malicious code in az-ext (npm)

The package az-ext was found to contain malicious code...

Malicious code in ext-zip (npm)

The package ext-zip was found to contain malicious code...

Malicious code in h1-cli-ext-iam-project-select (npm)

The package h1-cli-ext-iam-project-select was found to contain malicious code...

Malicious code in h1-cli-ext-root-openapi-generator (npm)

The package h1-cli-ext-root-openapi-generator was found to contain malicious code...

Malicious code in h1-cli-ext-storage-vault (npm)

The package h1-cli-ext-storage-vault was found to contain malicious code...

Malicious code in luster-ext-env (npm)

The package luster-ext-env was found to contain malicious code...

Malicious code in mozaik-ext-git (npm)

The package mozaik-ext-git was found to contain malicious code...

Malicious code in mozaik-ext-jiraagile (npm)

The package mozaik-ext-jiraagile was found to contain malicious code...

MAL-2025-25699 Malicious code in luster-ext-env (npm)

The package luster-ext-env was found to contain malicious code...

MAL-2025-22079 Malicious code in h1-cli-ext-iam-project-select (npm)

The package h1-cli-ext-iam-project-select was found to contain malicious code...

Malicious code in h1-cli-ext-root-auth (npm)

The package h1-cli-ext-root-auth was found to contain malicious code...

h1-cli-device-node (>=1.0.1-alpha.0, <=1.0.1-alpha.1) potentially affected by unknown CVE via h1-cli-ext-root-auth (1.0.1-alpha.1)

h1-cli-ext-root-auth NPM version 1.0.1-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on h1-cli-ext-root-auth and may be impacted: - h1-cli-device-node =1.0.1-alpha.0, =1.0.1-alpha.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22080...