477 matches found
CVE-2025-3931 Yggdrasil: local privilege escalation in yggdrasil
A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component. Yggdrasil creates a DBus method to dispatch messages to workers. However, it misses authentication and authorization checks,...
[SECURITY] [DLA 4163-1] rubygems security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4163-1 [email protected] https://www.debian.org/lts/security/ Lucas Kanashiro May 12, 2025 https://wiki.debian.org/LTS -...
MAL-2025-3416 Malicious code in startpeople-website (npm)
--- -= Per source details. Do not edit below this line.=-...
[SECURITY] Fedora 40 Update: dnf-4.23.0-1.fc40.1
Utility that allows users to manage packages on their systems. It supports RPMs, modules and comps groups & environments...
CVE-2025-3071
Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
MAL-2025-2839 Malicious code in azbit-internal (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-58048
Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability...
Linux Distros Unpatched Vulnerability : CVE-2024-57912
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: pressure: zpa2326: fix information leak in triggered buffer The 'sample' local struct is used to push data to user space from a triggered buffer, but it ha...
Linux Distros Unpatched Vulnerability : CVE-2023-0950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet...
Linux Distros Unpatched Vulnerability : CVE-2023-52581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memleak when more than 255 elements expired When more than 255...
Linux Distros Unpatched Vulnerability : CVE-2022-48986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix guppudrange for dax For dax pud, pudhuge returns true on x86. So the function...
Linux Distros Unpatched Vulnerability : CVE-2024-39503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion...
Linux Distros Unpatched Vulnerability : CVE-2022-49438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: sparcspkr - fix refcount leak in bbcbeepprobe offindnodebypath calls offindnodeoptsbypath, which returns a node pointer with refcount incremented, we...
Linux Distros Unpatched Vulnerability : CVE-2023-52639
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap-private being zero in kvms390vsiegmapnotifier resulting in a crash. This ...
Linux Distros Unpatched Vulnerability : CVE-2022-49178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memstick/msproblock: fix handling of read-only devices Use setdiskro to propagate the read-only state to the block layer instead of checking for it in -open and...
CVE-2024-58048
Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58048
Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58048
Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58048
CVE-2024-58048 documents describe a multi-threading issue described as a competitive condition vulnerability in Huawei HarmonyOS (and related components). The core problem is a race/synchronization condition in the package management/module workflow that could enable an attacker to exploit the ra...
