CVE-2023-54108: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The following message and call trace was seen with debug kernels: DMA-API: qla2xxx 0000:41:00.0: device driver failed to check map error device address=0x00000002a3ff38d8...

CVE-2025-13850: Improper Neutralization of Input During Web Page Generation

The LS Google Map Router plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'maptype' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

PT-2026-2617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the RDMA/core component related to the handling of netlink responses for RDMA NL LS OP IP RESOLVE queries. Specifically, the code does not correct...

TencentOS Server 4: pure-ftpd (TSSA-2025:0246)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0246 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2025-146751

Malicious code in uinsu-ls-dinabusab npm...

EUVD-2025-146749

Malicious code in uinsu-ls-dingks npm...

EUVD-2025-146753

Malicious code in uinsu-ls-dinabu npm...

EUVD-2025-146748

Malicious code in uinsu-ls-dings npm...

EUVD-2025-146755

Malicious code in uinsu-ls-din npm...

EUVD-2025-146752

Malicious code in uinsu-ls-dinabus npm...

Malicious code in uinsu-ls-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c119c10bbe09ced7648678289a091c471f7351933f18ad2d1623994b78f3ecd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146747

Malicious code in uinsu-ls-portal npm...

Malicious code in uinsu-ls-din (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6ca7325bb2fd23e8489fa14b3e80f7f422609ffe1e350594a2b30aefe2d6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146754

Malicious code in uinsu-ls-dinab npm...

EUVD-2025-146750

Malicious code in uinsu-ls-dingkos npm...

CVE-2025-40171 nvmet-fc: move lsop put work to nvmet_fc_ls_req_op

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It’s possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

CVE-2025-40171

Technical details for CVE-2025-40171 are not provided in the supplied connected documents. Monitor for vendor advisories for affected products, versions, impact, and fixes.

SUSE CVE-2025-61099

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaqueinfodetail function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted LS Update packet...

AZL-69619 CVE-2025-61099 affecting package frr for versions less than 8.5.5-5

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaqueinfodetail function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted LS Update packet...

CVE-2025-61099: NULL Pointer Dereference

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaqueinfodetail function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted LS Update packet...