D-Link DIR-845 authorization issue vulnerability

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. An authorization issue vulnerability exists in the D-Link DIR-845 v1.00-v1.03 versions, which stems from a static default credentials vulnerability contained in /etc/init0.d/S80telnetd.sh...

UBUNTU-CVE-2021-4037

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

PT-2022-38152

Уязвимость функции tegra20 clock init модуля drivers/clk/tegra/clk-tegra20.c драйвера контроллера тактовой частоты Samsung Exynos ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-49702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to RDMA/rxe functionality. Specifically, a potential NULL pointer dereference can occur within the rxe qp init req function when rxe queue init...

cloudbase-init (>=1.1.0, <=1.1.2), xlmmacrodeobfuscator (>=0.1.2, <=0.2.6) +1 more potentially affected by CVE-2022-33977 via untangle (1.1.1)

untangle PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on untangle and may be impacted: - cloudbase-init =1.1.0, =0.1.2, =1.0.0, =1.0.1 Source cves: CVE-2022-33977 Source advisory: OSV:GHSA-7XR3-6GGC-WC9P...

cloudbase-init (>=1.1.0, <=1.1.2), xlmmacrodeobfuscator (>=0.1.2, <=0.2.6) +1 more potentially affected by CVE-2022-33977 via untangle (1.1.1)

untangle PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on untangle and may be impacted: - cloudbase-init =1.1.0, =0.1.2, =1.0.0, =1.0.1 Source cves: CVE-2022-33977 Source advisory: GHSA-7XR3-6GGC-WC9P...

cloudbase-init (>=1.1.0, <=1.1.2), xlmmacrodeobfuscator (>=0.1.2, <=0.2.6) +1 more potentially affected by CVE-2022-31471 via untangle (1.1.1)

untangle PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on untangle and may be impacted: - cloudbase-init =1.1.0, =0.1.2, =1.0.0, =1.0.1 Source cves: CVE-2022-31471 Source advisory: OSV:GHSA-F83Q-2CP7-QRJG...

cloudbase-init (>=1.1.0, <=1.1.2), xlmmacrodeobfuscator (>=0.1.2, <=0.2.6) +1 more potentially affected by CVE-2022-31471 via untangle (1.1.1)

untangle PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on untangle and may be impacted: - cloudbase-init =1.1.0, =0.1.2, =1.0.0, =1.0.1 Source cves: CVE-2022-31471 Source advisory: GHSA-F83Q-2CP7-QRJG...

mariadb: server crash at Item_subselect::init_expr_cache_tracker

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Itemsubselect::initexprcachetracker...

Malware in chawla-init-3

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in chawla-init-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3b83282cb5a7c78b765bc841d165aac2df60547622ff4c760e935dc3eb3997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

systemd bug fix and enhancement update

An update is available for systemd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...

Malicious Package

Overview chawla-init-3 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

[SECURITY] Fedora 36 Update: google-guest-agent-20201217.02-5.fc36

This package contains scripts, configuration, and init files for features specific to the Google Compute Engine cloud environment...

PT-2022-33195

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v4.9.320 Description A refcount leak was discovered in the cns3xxx init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.10 through...

PT-2022-33208

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.320 Description The issue is related to a refcount leak in the realview gic of init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-33158

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.250 through 4.14.284 Description A memory leak issue was discovered in the dwc2 hcd init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.14.25...

PT-2022-33141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.287 Description The issue concerns an unexported function seg6 hmac net init in the Linux Kernel's IPv6 implementation. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-33099

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description A memory leak issue was discovered in the dwc2 hcd init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-33102

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.6 through v4.19.248 Description The issue is related to a refcount leak in the realview gic of init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...