CVE-2021-47092

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Always clear vmx-fail on emulationrequired Revert a relatively recent change that set vmx-fail if the vCPU is in L2 and emulationrequired is true, as that behavior is completely bogus. Setting vmx-fail and synthesizing ...

CVE-2021-47092

Summary: CVE-2021-47092 relates to a Linux kernel KVM VMX issue where setting vmx->fail during emulation_required in L2 nesting was incorrect, potentially causing a VM-Exit/VM-Fail contradiction and a warning during teardown (nested_vmx_vmexit). The fix reverts that change so vmx->fail is n...

CVE-2021-47092

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Always clear vmx-fail on emulationrequired Revert a relatively recent change that set vmx-fail if the vCPU is in L2 and emulationrequired is true, as that behavior is completely bogus. Setting vmx-fail and synthesizing ...

CVE-2020-36786

In the Linux kernel, the following vulnerability has been resolved: media: next staging: media: atomisp: fix memory leak of object flash In the case where the call to lm3554platformdatafunc returns an error there is a memory leak on the error return path of object flash. Fix this by adding an err...

Malicious code in new-dependency-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 703949005820ff7aa3798c6cd80ec685d1e8d4dc3663fbe99fd4d402540c4c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in analysis-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b5ec306ddd836199e002421ad6971e233057a594e310d51a70904ca62a8ce9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evilcalendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9238b16d348b58a5bb4c348e0172bc968696c4fd7f75c60179cec565757f3b73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CentOS 8 : libtiff (CESA-2023:0095)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0095 advisory. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libti...

Malicious code in arduino-ide-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcf7ca9bf0f189fb107121b5376feaf1535112a7c3e0c2d426fb74d95e3bf8f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Tenda i6 安全漏洞

Tenda i6 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i6 version 1.0.0.9, which originates from the ping1 parameter of the formSetAutoPing function in /goform/setAutoPing that fails to correctly validate the length of the input data, and can be...

Malicious code in wlwz-2312-7800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fcaeb752976ee1b4ec2864490b0ec36851a13f636d2e9816dae5b800f9afa1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dbd8240849571c0511de2015396a1f8ab92982d71a683246250e3124fdfa0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e324fa0bbd163b84f143cfdf696328031ae60c94d27665fdb29101da05a14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7507 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d9294f70d449bd920d7147923a8647597c10d30f5c8e64fc260f827fe2a4430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7706 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75e5f2b06ed59b1023d5b7d62471910cc2c922a27ae54456320b888dc5ea7f4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab1806a5ffb18dd0815ec94b47435c4c31518f75559018ddde6e2bd052c9eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b44efc7d5514573b47b1da5c0a421148640531fbc5aaec85bcde47aade67e389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca4d1e4504b28af3fe3d2ae55094471aa10b70c0b77e4446e2c79646b022fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae61be76cac6963037660dd3f97ef52e4e078b933c4eb06c697d473718776c46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 312392f35ec6cbf85d17b7b5d73ef5534284be2dba268bc74ca0175c3a979303 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...