921 matches found
EUVD-2022-2049
Malicious code in bioql PyPI...
EUVD-2025-21052
Malicious code in bioql PyPI...
EUVD-2024-3617
Malicious code in bioql PyPI...
EUVD-2025-13952
Malicious code in bioql PyPI...
UBUNTU-CVE-2022-50422
In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smpexecutetasksg When executing SMP task failed, the smpexecutetasksg calls deltimer to delete "slowtask-timer". However, if the timer handler sastaskinternaltimedout is running, the deltim...
CVE-2022-50422
CVE-2022-50422 affects the Linux kernel’s SCSI LIBSAS path. When SMP task execution fails, smp_execute_task_sg() calls del_timer() to remove slow_task->timer, but if sas_task_internal_timedout() is running, the timer isn’t stopped, causing a use-after-free of task->slow_task. The fix is to ...
PT-2025-40107
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the libsas component of the Linux kernel, specifically within the smp execute task sg function. This occurs when an SMP task execution fails, and the del...
CVE-2023-53198
In the Linux kernel, the following vulnerability has been resolved: raw: Fix NULL deref in rawgetnext. Dae R. Jeong reported a NULL deref in rawgetnext 0. It seems that the repro was running these sequences in parallel so that one thread was iterating on a socket that was being freed in another...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to use spinlocks to protect slow paths during iteration of SOCKRAW sockets, which could lead to...
AZL-66812 CVE-2025-38709 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a loop device block size is changed underneath a mounted filesystem. This causes a mismatch between the block device block size and the...
Linux Distros Unpatched Vulnerability : CVE-2023-22909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. SpecialMobileHistory allows remote attackers ...
Linux Distros Unpatched Vulnerability : CVE-2020-9481
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack. CVE-2020-9481 Note that Nessus relies on the presence ...
Linux Distros Unpatched Vulnerability : CVE-2019-5737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service DoS by...
Linux Distros Unpatched Vulnerability : CVE-2023-2650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use...
Malicious code in slow-moon-air-scale-interpret (npm)
The package slow-moon-air-scale-interpret was found to contain malicious code...
MAL-2025-18307 Malicious code in deserialize-slow-warn-quick-export (npm)
The package deserialize-slow-warn-quick-export was found to contain malicious code...
MAL-2025-37924 Malicious code in upsilon-decode-gamma-slow-report (npm)
The package upsilon-decode-gamma-slow-report was found to contain malicious code...
MAL-2025-19726 Malicious code in epsilon-test-slow-daemon-root (npm)
The package epsilon-test-slow-daemon-root was found to contain malicious code...