123 matches found
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: xhci: Fixed a issue where a NULL pointer dereference could occur during full-speed re-enumeration of devices. This occurs when re-enumering full-speed devices after a failed “address device” command. Full-speed devices may need t...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: xhci: Device endpoints are removed from the bandwidth list when the device is freed. Endpoints are normally deleted from the bandwidth list when they are dropped, before the virt device is freed. If the xHCI host is dying or bein...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053409)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053409 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed...
Linux Distros Unpatched Vulnerability : CVE-2026-53348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SDCA: fix NULL pointer dereference in sdcadevunregisterfunctions sdcadevunregisterfunctions iterates over all SDCA function descriptors and calls...
panther-analysis-tool (>=1.0.0, <=1.2.1), sqlfluff-templater-dbt (2.3.1) potentially affected by CVE-2026-46374 via sqlfluff (2.3.1)
sqlfluff PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - panther-analysis-tool =1.0.0, =1.2.1 - sqlfluff-templater-dbt 2.3.1 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...
panther-analysis-tool (>=1.0.0, <=1.2.1), sqlfluff-templater-dbt (2.3.1) potentially affected by CVE-2026-46373 via sqlfluff (2.3.1)
sqlfluff PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - panther-analysis-tool =1.0.0, =1.2.1 - sqlfluff-templater-dbt 2.3.1 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...
Fedora 43 : linux-firmware (2026-16c8693020)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-16c8693020 advisory. Update to 20260519: ASoC: tas2783: Add Firmware files for tas2783A projects add firmware for MT7927 WiFi device Add HP ISH firmware for Intel Panther Lake...
Fedora 44 : linux-firmware (2026-2b07c67f06)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2b07c67f06 advisory. Update to 20260519: ASoC: tas2783: Add Firmware files for tas2783A projects add firmware for MT7927 WiFi device Add HP ISH firmware for Intel Panther Lake...
panther-analysis-tool (>=1.0.0, <=1.2.1), sqlfluff-templater-dbt (2.3.1) potentially affected by CVE-2026-46374 via sqlfluff (2.3.1)
sqlfluff PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - panther-analysis-tool =1.0.0, =1.2.1 - sqlfluff-templater-dbt 2.3.1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...
panther-analysis-tool (>=1.0.0, <=1.2.1), sqlfluff-templater-dbt (2.3.1) potentially affected by CVE-2026-46373 via sqlfluff (2.3.1)
sqlfluff PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - panther-analysis-tool =1.0.0, =1.2.1 - sqlfluff-templater-dbt 2.3.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...
2026.2 IPU - Intel® Processor Firmware Advisory
Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35979 Description: Exposure of sensitive information caused by shared...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-006699)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006699 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Remove device endpoints from bandwidth list when freeing the device Endpoints are normally...
EUVD-2025-117235
Malicious code in mechanical-amber-panther npm...
Malicious code in orthodox_panther_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de77ecea0ba1406ca2ecdfce59fc4e4348be1c608cb64e168c947511c8461bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-105949
Malicious code in decisivepantherz3n npm...
EUVD-2025-106012
Malicious code in confidentialpantherz3n npm...
EUVD-2025-95878
Malicious code in orthodoxpantherz3n npm...
Malicious code in civic_panther_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab4fa97f5479098ce810331eba414147b4b684281e186517a598beed309a94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-114055 Malicious code in fixed_panther_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faffc4c2dc0fe658f5dcae9cd65190aec0c9b4bcff30cfb85f9af7612ca6d3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...