PT-2024-16977

Name of the Vulnerable Software and Affected Versions Password for WP plugin for WordPress versions up to, and including, 1.3 Description The issue is due to missing or incorrect nonce validation on the get3 init admin page function, making it possible for unauthenticated attackers to update...

pkcs15-init personalization libopensc Data Compromise

The vulnerability of the pkcs15-init personalization utility and the libopensc library related to the OpenSC software suite involves the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected informati...

PT-2025-3669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the ti-ads1298 driver. The issue arises because devm kasprintf can return a NULL pointer on failure, and a check for this...

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005562 fixes several issues. The following security issues were fixed: CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memor...

PT-2024-36967

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A slab-use-after-free issue was reported in the Linux kernel, specifically in the dst destroy function. The problem occurs when the net structure is freed before all the dst callbacks are calle...

Malicious code in finn-pulse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8556cda5df574e7c339a9e910f83692fefe384dd8c3c1107fafd270c8057a170 The OpenSSF Package Analysis project identified 'finn-pulse-init' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11203 Malicious code in finn-pulse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8556cda5df574e7c339a9e910f83692fefe384dd8c3c1107fafd270c8057a170 The OpenSSF Package Analysis project identified 'finn-pulse-init' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

kernel: drm/amdgpu: change vm->task_info handling

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...

SUSE CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

Linux IPv6 seg6_init() Buffer Overflow

The vulnerability of the seg6init function in the net/ipv6/seg6.c module of the Linux operating system’s IPv6 kernel implementation is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

UBUNTU-CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

Linux kernel Ice DoS

The vulnerability of the ice component in the Linux operating system’s kernel is related to resource management errors in the icemoduleinit module. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-40550 · Mozilla · Seamonkey

Name of the Vulnerable Software and Affected Versions: SeaMonkey versions prior to 2.53.19 Description: The issue is related to a security vulnerability in SeaMonkey. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where thi...

PT-2025-3328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a vulnerability in the powerpc/prom init component related to missing size-cells properties in escc nodes on some PowerMac systems. This issue is a warning duri...

Astra Linux – Vulnerability in cloud-init

Sensitive data may be exposed in logs of cloud-init before version 23.1.2. Attackers could use this information to obtain hashed passwords and potentially escalate their privileges...

PT-2024-36938

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the ocfs2 file system in the Linux kernel, where the ocfs2 get init inode function fails to free an inode, leading to busy inodes after unmount. This occurs when new ino...

btrfs Information Disclosure

The vulnerability of the btrfs component in the Linux operating system’s kernel is related to the disclosure of information within the initdatacontainer function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

Linux DRM AMD PM DoS

The vulnerability of components related to DRM/AMD/PM in the Linux operating system is associated with errors in the double-release function of sidpminit. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

Linux kernel init DoS

The vulnerability of the init kernel component in the Linux operating system is related to a memory corruption in the setupcommandline function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Powerpc Buffer Overflow DoS

The vulnerability of the powerpc/powernv components in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the opaleventinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...