CVE-2020-25672 vulnerabilities

Vulnerabilities for packages: linux-qemu-rc, linux-qemu, linux-vmware...

CVE-2007-4998 vulnerabilities

Vulnerabilities for packages: linux-qemu-rc, linux-qemu, linux-vmware...

CVE-2023-7042 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure-generic, linux-vmware, linux-qemu-rc, linux-gcp-generic, linux-aws-generic, linux-qemu, linux-qemu-generic, linux-azure, linux-vmware-generic...

CVE-2024-0193 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure-generic, linux-vmware, linux-qemu-rc, linux-gcp-generic, linux-aws-generic, linux-qemu, linux-qemu-generic, linux-azure, linux-vmware-generic...

GHSA-FR2G-FCJJ-V8HC vulnerabilities

Vulnerabilities for packages: linux-qemu-rc, linux-qemu, linux-vmware...

GHSA-8MWF-HVFP-6XFG vulnerabilities

Vulnerabilities for packages: linux-qemu-rc, linux-qemu, linux-vmware...

GHSA-VCF9-7QJV-G6Q4 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure-generic, linux-vmware, linux-qemu-rc, linux-gcp-generic, linux-aws-generic, linux-qemu, linux-qemu-generic, linux-azure, linux-vmware-generic...

GHSA-JM6X-W8XX-HPWQ vulnerabilities

Vulnerabilities for packages: linux-qemu-rc, linux-qemu, linux-vmware...

GHSA-52X7-WCQQ-WFJP vulnerabilities

Vulnerabilities for packages: linux-aws, linux-gcp, linux-azure-generic, linux-vmware, linux-qemu-rc, linux-gcp-generic, linux-aws-generic, linux-qemu, linux-qemu-generic, linux-azure, linux-vmware-generic...

Linux Distros Unpatched Vulnerability : CVE-2016-2420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to ga...

CVE-2025-58450 pREST has Systemic SQL Injection Vulnerability

pREST PostgreSQL REST, is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a...

CVE-2025-58450 pREST has Systemic SQL Injection Vulnerability

pREST PostgreSQL REST, is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a...

CVE-2025-39734

CVE-2025-39734 affects the Linux kernel component fs/ntfs3 in the NTFS file-system path. The issue stems from a revert of the inode_trylock versus inode_lock handling (commit 69505fe98f198ee813898cbcaf6770949636430b). The description notes that previously conditional lock acquisition was removed ...

Amazon Linux 2 : krb5, --advisory ALAS2-2025-2985 (ALAS-2025-2985)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2985 advisory. krb5: overflow when calculating ulog block size CVE-2025-24528 A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weakness...

PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()

...

krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This ma...

Linux Distros Unpatched Vulnerability : CVE-2025-8842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function dodirective of the file preproc.c. The manipulation lead...

XWiki Platform 安全漏洞

XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions prior to 16.4.8 and 17.4.0-rc-1, which stems from the unencrypted storage of sensitive cookies in PDF export jobs...

Malicious versions of Nx were published

Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file system, collects credentials, and posts them to GitHub as a repo under user's accounts. Immediate Actions Required For all users, check if you were...

Embeded Malicious Code

Overview @nx/node is an AI-first build platform that connects everything from your editor to CI. Helping you deliver fast, without breaking things. Affected versions of this package are vulnerable to Embeded Malicious Code through a malicious postinstall script that triggers a file named...