114 matches found
CVE-2025-71237 nilfs2: Fix potential block overflow that cause system hang
In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fix potential block overflow that cause system hang When a user executes the FITRIM command, an underflow can occur when calculating nblocks if endblock is too small. Since nblocks is of type sectort, which is u64, a...
MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.8.el7.AXS7 (AXSA:2025-9625:10)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9625:10 advisory. media: edia: dvbdev: fix a use-after-free CVE-2024-27043 btrfs: dev-replace: properly validate device names CVE-2024-26791 KVM: nSVM: Ignore nCR34:0...
Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2021-37600)
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...
EUVD-2025-135785
Malicious code in teaha-erws-sem npm...
Malicious code in teaha-erws-sem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbafe98abda248c00a0708b21a66bc32b1f02836acca1f6a7183c9a8b3083a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-135784
Malicious code in teaha-erws-sem npm...
JLSEC-2025-190 An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an...
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...
EUVD-2019-11077
Malware in sbrugna...
EUVD-2021-25171
Malware in sbrugna...
EUVD-2021-25168
Malware in sbrugna...
EUVD-2019-11128
Malware in sbrugna...
EUVD-2023-41528
Malicious code in bioql PyPI...
EUVD-2022-36756
Malicious code in bioql PyPI...
CVE-2025-8920
A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...
CVE-2025-8788
A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument...
CVE-2025-8787
Portabilis i-Diario up to 1.5.0 is affected by a Cross‑Site Scripting vulnerability in the Registro das atividades component. The issue stems from manipulating the argument Registro de atividades/Conteúdos in the file /registros-de-conteudos-por-disciplina/, which can be exploited remotely. The e...
CVE-2025-51657
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSLink.php...
CVE-2025-38306
CVE-2025-38306 concerns the Linux kernel. It describes a race in fs/fhandle.c where may_decode_fh() can call has_locked_children() without holding locks, enabling an oopsable race. The fix renames has_locked_children() to __has_locked_children(), makes it static, and updates callers in fs/namespa...
CVE-2025-48287
Deserialization of Untrusted Data vulnerability in Pagaleve Pix 4x sem juros - Pagaleve wc-pagaleve allows Object Injection.This issue affects Pix 4x sem juros - Pagaleve: from n/a through = 1.6.9...