EUVD-2022-7333

Malicious code in bioql PyPI...

EUVD-2022-35133

Malicious code in bioql PyPI...

EUVD-2024-46410

Malicious code in bioql PyPI...

EUVD-2025-20917

Malicious code in bioql PyPI...

EUVD-2023-12726

Malicious code in bioql PyPI...

EUVD-2022-32737

Malicious code in bioql PyPI...

EUVD-2023-23474

Malicious code in bioql PyPI...

EUVD-2023-29464

Malicious code in bioql PyPI...

EUVD-2023-54017

Malicious code in bioql PyPI...

EUVD-2022-52610

Malicious code in bioql PyPI...

EUVD-2024-17293

Malicious code in bioql PyPI...

EUVD-2025-17594

Malicious code in bioql PyPI...

fetchmail -- potential crash when authenticating to SMTP server

Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a protocol violation where, when a trusted but malicious or malfunctioning SMTP server responds to an authentication request with a "334" code but without a following blank on the line, it will...

SUSE CVE-2025-11215

Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-53509 qed: allow sleep in qed_mcp_trace_dump()

In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qedmcptracedump By default, qedmcpcmdandunion delays 10us at a time in a loop that can run 500K times, so calls to qedmcpnvmrdcmd may block the current thread for over 5s. We observed thread scheduling delays...

KLA88567 DoS vulnerabilities in Mozilla Firefox

Denial of service vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability in JIT Codegen Extensions can be exploited to cause denial of...

CVE-2025-11021

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

CVE-2025-11021

CVE-2025-11021 affects the libsoup HTTP library's cookie date handling, allowing an out-of-bounds memory read that could disclose sensitive process memory. Connected advisories note that fixes exist and packages are being updated (e.g., Fedora/AlmaLinux advisories and IBM/Mariner entries referenc...

CVE-2025-11021 Libsoup: out-of-bounds read in cookie date handling of libsoup http library

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

tinyusb:msc: Crash in dcd_int_handler

Project: https://github.com/hathach/tinyusb.git Detailed Report: https://oss-fuzz.com/testcase?key=6587755753963520 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: msc Job Type: libfuzzerasantinyusb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a2cd5de5e00 Crash State:...