PT-2025-53172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the powerpc/iommu subsystem related to the sharing of notifiers between PCI and VIO buses. The fail iommu setup function registers the fail iommu bus...

AZL-28051 CVE-2022-48063 affecting package binutils for versions less than 2.37-10

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

Memory corruption

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

MAL-2023-1028 Malicious code in aurora-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4392d1914575e090dacd661c28ce77f65b0f9f82c9389a1fe366f9216a09b0b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2023-1685023501 libssh: Fix of CVE-2021-3634

CVE-2021-3634: create a separate length for sessionid...

Trucking on with DotDumper

Trucking on with DotDumper By Trellix · May 11, 2023 This blog was written by Max Kersten On the 11th of August 2022, the initial public version of DotDumper was released. A brief refresh: DotDumper is an open-source automatic unpacker for DotNet Framework targeting files. This blog marks a publi...

Malicious code in pdf-the-daily-stoic-366-meditations-on-wisdom-perseverance-and-the-art-of-living-by-ryan-holiday-on- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15b00931016f674300ae2c0c8708278b527051eb241f2fdc87c8a4ebe8900ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in god-a-human-history-by-reza-aslan-on-ipad-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceaa90b6b9f360d75eeb0e21cc701c5ccc46fafebef1bdb9356bce898fbb1bfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in the-starch-solution-eat-the-foods-you-love-regain-your-health-and-lose-the-weight-for-good-by-john-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2347832fd4241c7096849fc30f8047685ccc585a041e79482bc660e00b0fc0c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-323 Malicious code in fabric-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031f95a39929ba0a778100655abe80c8b7455a55f5e2d1dea13b6bd2dbb3bd16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in td-app-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf37f106766555425d4a6579374a74778e61776dcdff333df9129a109b4a82d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-27478

libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. libmemcached could return data for a previously requested key, if that previous request timed out due to a low POLLTIMEOUT. This issue has been addressed in version 1.1.4. Users are advised to upgrade...

DEBIAN-CVE-2023-27478

libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. libmemcached could return data for a previously requested key, if that previous request timed out due to a low POLLTIMEOUT. This issue has been addressed in version 1.1.4. Users are advised to upgrade...

PT-2023-1957 · Unknown +2 · Libmemcached-Awesome +2

Name of the Vulnerable Software and Affected Versions: libmemcached-awesome versions prior to 1.1.4 Description: The issue is related to insufficient protection of service data when handling the POLL TIMEOUT parameter, which could allow a remote attacker to gain unauthorized access to protected...

SUSE CVE-2014-0540

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...

SUSE CVE-2014-4208

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220...

SUSE CVE-2018-5181

If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with...

MAL-2023-999 Malicious code in yellowbrain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8604825503353f1b309ef2c2bbb2a92faee05eac1bccfe45971c53a44b55df95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0456

A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a separate realm to be accessible to an attacker, permitting access to unauthorized information...

kernel: sfc: fix considering that all channels have TX queues

In the Linux kernel, the following vulnerability has been resolved: sfc: fix considering that all channels have TX queues Normally, all channels have RX and TX queues, but this is not true if modparam efxseparatetxchannels=1 is used. In that cases, some channels only have RX queues and others onl...