10048 matches found
EUVD-2025-35864
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLanSetupRouterSettings...
SUSE-SU-2025:20875-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RTUpdate6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue...
Malicious Package
Overview mender-setup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-35762
Malicious code in mender-setup npm...
MAL-2025-48577 Malicious code in mender-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mender-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-60552
The D-Link DIR600L wireless router, specifically on firmware version FW116WWb01 , is vulnerable to a stack-based buffer overflow . This issue originates in the formTcpipSetup function, where the software fails to properly validate the length of input data when processing the curTime parameter. A ...
CVE-2025-52099
...
CVE-2025-52099
CVE-2025-52099 describes an integer overflow in SQLite3 v3.50.0 that can enable a remote denial of service via the setupLookaside function. The root cause is an overflow during memory allocation in sqlite3_db_config-related code, leading to potential exploitation that can crash the application. P...
EUVD-2025-35696
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
CVE-2025-50950
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
DEBIAN-CVE-2025-50950
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
AZL-68885 CVE-2025-50950 affecting package audiofile 0.3.6-27
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
CVE-2025-50950
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
AZL-68814 CVE-2025-50950 affecting package audiofile 0.3.6-27
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
UBUNTU-CVE-2025-50950
Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function...
ChurchCRM Deserialization Vulnerability
ChurchCRM is ChurchCRM open source an open source CRM system for churches. ChurchCRM 5.18.0 and earlier versions exist deserialization vulnerability , the vulnerability stems from the file setup/routes/setup.php in the parameter DBPASSWORD/ROOTPATH/URL in the receipt of user-submitted serialized...
CVE-2025-50950
The Audiofile library (a C-based library for reading and writing various audio formats) contains a NULL pointer dereference vulnerability in the ModuleState::setup function. This flaw can be triggered by processing a specially crafted input file , leading to an application crash and a denial of s...
