AZL-68879 CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...

EUVD-2025-36448

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...

eu.lundegaard.liferay:liferay-db-setup-core (>=3.1.0, <=3.2.0) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (5.13.3)

com.liferay.portal:com.liferay.portal.impl MAVEN version 5.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - eu.lundegaard.liferay:liferay-db-setup-core =3.1.0, =3.2.0 Source cves:...

eu.lundegaard.liferay:liferay-db-setup-core (4.0.0) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (62.0.1)

com.liferay.portal:com.liferay.portal.impl MAVEN version 62.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - eu.lundegaard.liferay:liferay-db-setup-core 4.0.0 Source cves:...

eu.lundegaard.liferay:liferay-db-setup-core (3.0.0) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (4.2.5)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - eu.lundegaard.liferay:liferay-db-setup-core 3.0.0 Source cves: CVE-2025-622...

SUSE CVE-2025-52099

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-29088. Reason: This record is a duplicate of CVE-2025-29088. Notes: All CVE users should reference CVE-2025-29088 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

SQLite setupLookaside Heap Buffer Overflow DoS

The vulnerability of the setupLookaside function in the SQLite database management system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: mm: swap: fix potential buffer overflow in setup_clusters()

A flaw was found in the Linux kernel's memory management mm swap component. A local attacker with low privileges could exploit a buffer overflow vulnerability in the setupclusters function. This issue arises from insufficient validation of page ranges, which could allow an attacker to write data...

Linux kernel x86/coco DoS

The vulnerability of the x86/coco components of the Linux operating system’s kernel is related to insufficient checking of input data in the setuparch and ccmkdec functions. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in python3-autopep8 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 36e35b782ec2e15a96c4b7c9d9eb5bacbbf3ded26b6b3ee72f2f698b1622c241 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-191844 Malicious code in python3-autopep8 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 36e35b782ec2e15a96c4b7c9d9eb5bacbbf3ded26b6b3ee72f2f698b1622c241 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in statsapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5c59dd2732ec529321670e500c8b732a5641b361029fd435277a6f110d4c5286 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-191878 Malicious code in statsapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5c59dd2732ec529321670e500c8b732a5641b361029fd435277a6f110d4c5286 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

SUSE CVE-2025-50950

Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...

EUVD-2025-35887

Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service via the setupLookaside function...

EUVD-2025-35864

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLanSetupRouterSettings...

SUSE-SU-2025:20875-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

This update for kernel-livepatch-MICRO-6-0-RTUpdate6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue...

Malware in mender-setup

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48577 Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...