PT-2025-36807

Name of the Vulnerable Software and Affected Versions: AntoineH Football Pool versions through 2.12.6 Description: The software contains an improper neutralization of input during web page generation, leading to a cross-site scripting issue. The vulnerability allows for stored cross-site scriptin...

Malicious code in furniture-declared-pool (npm)

The package furniture-declared-pool was found to contain malicious code...

MAL-2025-44341 Malicious code in furniture-declared-pool (npm)

The package furniture-declared-pool was found to contain malicious code...

WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified

...

xdp: fix invalid wait context of page_pool_destroy()

...

workqueue: Put the pwq after detaching the rescuer from the pool

...

net: libwx: remove duplicate page_pool_put_full_page()

...

page_pool: Fix use-after-free in page_pool_recycle_in_ring

...

HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX

...

Linux Distros Unpatched Vulnerability : CVE-2011-4970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple SQL injection vulnerabilities in LCG Disk Pool Manager DPM before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands v...

Linux Distros Unpatched Vulnerability : CVE-2022-33747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M Physical-to-Machine mapping. When lar...

Linux Distros Unpatched Vulnerability : CVE-2022-33746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing ma...

Linux Distros Unpatched Vulnerability : CVE-2021-33928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. CVE-2021-33928...

SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2025:02985-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02985-1 advisory. - CVE-2025-50181: Pool managers now properly control redirects when retries is passed. bsc1244925 Tenable has extracte...

SUSE CVE-2025-47950

CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service DoS vulnerability exists in the CoreDNS DNS-over-QUIC DoQ server implementation. The server previously created a new goroutine for every incoming QUIC stream without imposing any limits on the number of...

SUSE-SU-2025:02985-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2025-50181: Pool managers now properly control redirects when retries is passed. bsc1244925...

Linux Distros Unpatched Vulnerability : CVE-2019-16942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled either globally or for a specific...

Linux Distros Unpatched Vulnerability : CVE-2025-32441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Prior to version 2.2.14, when using the Rack::Session::Pool middleware, simultaneous rack requests can restore a...

Linux Distros Unpatched Vulnerability : CVE-2025-46336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, a...

Linux Distros Unpatched Vulnerability : CVE-2020-36187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...