EUVD-2015-1254

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986610 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in...

EUVD-2024-22173

Malicious code in bioql PyPI...

EUVD-2021-34209

Malicious code in bioql PyPI...

EUVD-2023-51745

Malicious code in bioql PyPI...

EUVD-2022-52746

Malicious code in bioql PyPI...

EUVD-2024-46137

Malicious code in bioql PyPI...

EUVD-2023-38151

Malicious code in bioql PyPI...

mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()

...

Malicious code in @coolblue-development/next-recently-viewed (npm)

The package @coolblue-development/next-recently-viewed was found to contain malicious code...

MAL-2025-7135 Malicious code in @coolblue-development/next-recently-viewed (npm)

The package @coolblue-development/next-recently-viewed was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-21861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/migratedevice: don't add folio to be freed to LRU in migratedevicefinalize If migration succeeded, we called foliomigrateflags-memcgroupmigrate to migrate th...

CVE-2023-34027

Deserialization of Untrusted Data vulnerability in Rajnish Arora Recently Viewed Products.This issue affects Recently Viewed Products: from n/a through 1.0.0...

kernel: fscache: Fix oops due to race with cookie_lru and use_cookie

A flaw was found in the Linux kernel's fscache component. A race condition can occur when a cached object is being discarded while another process attempts to use it. This timing issue can lead to a null pointer dereference, causing the system to crash and resulting in a denial of service...

SUSE CVE-2023-53095

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the process of being removed from an object. The locking rules here are a bit unclear but it looks currently like res-bo assignment is protected ...

CVE-2023-53095

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the process of being removed from an object. The locking rules here are a bit unclear but it looks currently like res-bo assignment is protected ...

CVE-2025-1008

The Recently Purchased Products For Woo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘view’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2025-9799

Name of the Vulnerable Software and Affected Versions Recently Purchased Products For Woo plugin for WordPress versions up to, and including, 1.1.3 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing authenticated...

CVE-2025-1008: Improper Neutralization of Input During Web Page Generation

The Recently Purchased Products For Woo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘view’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2021-4382

The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetchexternalimage function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server whic...