The vulnerability of the JavaScript JSS-based web application styling tool lies in the lack of memory release after the effective lifespan, allowing a malicious actor to trigger a service failure.

The vulnerability of the JavaScript JSS tool for styling web applications is related to the lack of memory release after the effective lifespan of the tool. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

EUVD-2018-1045

Malware in sbrugna...

EUVD-2025-13102

Malicious code in bioql PyPI...

EUVD-2021-29492

Malicious code in bioql PyPI...

EUVD-2025-10050

Malicious code in bioql PyPI...

EUVD-2024-53832

Malicious code in bioql PyPI...

The vulnerability of the drivers/net/ethernet/intel/ice component of the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the drivers/net/ethernet/intel/ice component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the v3d_sched.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the v3dsched.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hash_accept() function in the crypto/algif_hash.c component of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hashaccept function in the crypto/algifhash.c component of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

UBUNTU-CVE-2022-50247

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the @sharedhcd to NULL before decrease the usage count by usbputhcd, this will cause the shared hcd not released...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release issue with the tx path in the iwlwifi driver, which could cause the kernel to crash or lock...

CVE-2025-58374 Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a default list of allowed commands that do not need manual approval if auto-approve is enabled, and npm install is included in that list. Because npm install executes lifecycle...

CBL Mariner 2.0 Security Update: httpd (CVE-2025-53020)

The version of httpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53020 advisory. - Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apach...

Apache 2.4.x < 2.4.64 Multiple Vulnerabilities

According to its banner, the version of Apache running on the remote host is 2.4.x prior to 2.4.64. It is, therefore, affected by multiple vulnerabilities: - HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of...

ALPINE-CVE-2025-53020

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue...

CVE-2025-44003

Missing Release of Resource after Effective Lifetime CWE-772 in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a...

CVE-2025-38123 net: wwan: t7xx: Fix napi rx poll issue

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of...

CVE-2025-38123 net: wwan: t7xx: Fix napi rx poll issue

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of...

The vulnerability in the driver/gpu/drm/xe/xe_exec.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/gpu/drm/xe/xeexec.c kernel module of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the fec_enet_init() function in the drivers/net/ethernet/freescale/fec_main.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system, which allows an attacker to gain access to protected information.

Vulnerability of the fecenetinit function in the drivers/net/ethernet/freescale/fecmain.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting thi...