media: mtk-vcodec: potential null pointer deference in SCP

...

PT-2025-40529

Name of the Vulnerable Software and Affected Versions Qt versions 6.7.0 through 6.9.0 Qt6-svg qtsvg-opensource-src Description The issue is a use-after-free condition within the Qt framework, specifically related to the parsing of SVG files. The renderPattern function and the SVG module are...

Linux Distros Unpatched Vulnerability : CVE-2018-3298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easi...

USN-7718-1: GNU binutils vulnerability

It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash...

Linux Distros Unpatched Vulnerability : CVE-2015-3249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service out-of-bounds access and daemon...

Linux Distros Unpatched Vulnerability : CVE-2024-9936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This...

AZL-66464 CVE-2025-38585 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmingetvarint When gmingetconfigvar calls efi.getvariable and the EFI variable is larger than the expected buffer size, two behaviors combine to create a stack buffer overflow...

Unspecified Vulnerability in Emby MediaBrowser (CNVD-2025-19601)

Emby MediaBrowser is a media server software from Emby. Emby MediaBrowser contains a security vulnerability that can be exploited by attackers to obtain sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2024-39371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring: check for non-NULL file pointer in iofilecanpoll In earlier kernels, it was possibl...

Malicious code in @lbnqduy/potential-succotash (npm)

The package @lbnqduy/potential-succotash was found to contain malicious code...

MAL-2025-8339 Malicious code in @lbnqduy/potential-parakeet (npm)

The package @lbnqduy/potential-parakeet was found to contain malicious code...

MAL-2025-9135 Malicious code in @npmteanew/potential-octo-dollop (npm)

The package @npmteanew/potential-octo-dollop was found to contain malicious code...

MAL-2025-8337 Malicious code in @lbnqduy/potential-eureka (npm)

The package @lbnqduy/potential-eureka was found to contain malicious code...

Malicious code in @lbnqduy/potential-eureka (npm)

The package @lbnqduy/potential-eureka was found to contain malicious code...

Malicious code in @lbnqduy/potential-memory (npm)

The package @lbnqduy/potential-memory was found to contain malicious code...

Malicious code in @npmteanew/potential-octo-dollop (npm)

The package @npmteanew/potential-octo-dollop was found to contain malicious code...

MAL-2025-8340 Malicious code in @lbnqduy/potential-succotash (npm)

The package @lbnqduy/potential-succotash was found to contain malicious code...

MAL-2025-8338 Malicious code in @lbnqduy/potential-memory (npm)

The package @lbnqduy/potential-memory was found to contain malicious code...

CVE-2025-8908 Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection

A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched...

AlmaLinux 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (ALSA-2025:12280)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:12280 advisory. com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 Tenable has extracted the preceding description block directly...