EUVD-2025-20917

Malicious code in bioql PyPI...

EUVD-2022-38793

Malicious code in bioql PyPI...

EUVD-2022-51175

Malicious code in bioql PyPI...

EUVD-2023-24021

Malicious code in bioql PyPI...

EUVD-2024-34924

Malicious code in bioql PyPI...

EUVD-2022-32737

Malicious code in bioql PyPI...

EUVD-2022-32319

Malicious code in bioql PyPI...

EUVD-2022-52610

Malicious code in bioql PyPI...

EUVD-2024-19651

Malicious code in bioql PyPI...

EUVD-2025-6144

Malicious code in bioql PyPI...

EUVD-2022-36756

Malicious code in bioql PyPI...

EUVD-2023-29542

Malicious code in bioql PyPI...

fetchmail -- potential crash when authenticating to SMTP server

Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a protocol violation where, when a trusted but malicious or malfunctioning SMTP server responds to an authentication request with a "334" code but without a following blank on the line, it will...

SUSE CVE-2025-11215

Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-53509 qed: allow sleep in qed_mcp_trace_dump()

In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qedmcptracedump By default, qedmcpcmdandunion delays 10us at a time in a loop that can run 500K times, so calls to qedmcpnvmrdcmd may block the current thread for over 5s. We observed thread scheduling delays...

KLA88567 DoS vulnerabilities in Mozilla Firefox

Denial of service vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability in JIT Codegen Extensions can be exploited to cause denial of...

CVE-2025-11021

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

CVE-2025-11021

CVE-2025-11021 affects the libsoup HTTP library's cookie date handling, allowing an out-of-bounds memory read that could disclose sensitive process memory. Connected advisories note that fixes exist and packages are being updated (e.g., Fedora/AlmaLinux advisories and IBM/Mariner entries referenc...

CVE-2025-11021 Libsoup: out-of-bounds read in cookie date handling of libsoup http library

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

SUSE-SU-2025:03246-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Updated CUDA variant to 580.82.07: - CVE-2025-23277: Fixed access to memory outside bounds permitted under normal use cases in NVIDIA Display Driver bsc1247528. - CVE-2025-23278: Fixed improper index validation by issuing a...