13120 matches found
CVE-2025-23155 net: stmmac: Fix accessing freed irq affinity_hint
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinityhint In stmmacrequestirqmultimsi, a pointer to the stack variable cpumask is passed to irqsetaffinityhint. This value is stored in irqdesc-affinityhint, but once stmmacrequestirqmultim...
GHSA-322V-VH2G-QVPV vulnerabilities
Vulnerabilities for packages: mattermost-fips...
CGA-MCQ3-PQJ4-644J
Bulletin has no description...
DLA-4151-1 golang-github-gorilla-csrf - security update
Bulletin has no description...
ASB-A-391932683
Bulletin has no description...
ASB-A-394100273
Bulletin has no description...
ASB-A-377312730
Bulletin has no description...
ASB-A-382314359
Bulletin has no description...
CGA-3G2W-6VPW-C433
Bulletin has no description...
AI Code Hallucinations Increase the Risk of ‘Package Confusion’ Attacks
A new study found that code generated by AI is more likely to contain made-up information that can be used to trick software into interacting with malicious code...
MAL-2025-3660 Malicious code in pie-docs (npm)
This package steals IP address and sent it to C&C server in preinstall hook. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6326ffe9d39e0d889a1a93b2faf51b274055e4a9f12f3596cdca2f85098245d3 Any computer that has this package installed or running should be considered...
MAL-2025-3557 Malicious code in redmins (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbc5bc9b00f12ad85587941ac33154352652d85f6c05ec40ecdeb697b7dc20a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DLA-4144-1 qemu - security update
Bulletin has no description...
DLA-4126-2 jinja2 - regression update
Bulletin has no description...
CGA-JRWQ-7RGM-H5M4
Bulletin has no description...
CGA-47XV-JQ34-598V
Bulletin has no description...
GHSA-R9GV-QFFM-XW6F Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Summary Vulnerable Version: Yeswiki alert1 Details Reflected Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in...
BELL-CVE-2025-2866
Bulletin has no description...
PT-2025-18184 · Slims · Slims
Name of the Vulnerable Software and Affected Versions: Slims Senayan Library Management Systems version 9.6.1 Description: The issue is related to SQL Injection in the admin/modules/master file/coll type.php file. This allows for potential exploitation. No information is provided about the...