BELL-CVE-2025-21861

Bulletin has no description...

BELL-CVE-2025-21846

Bulletin has no description...

BELL-CVE-2025-21848

Bulletin has no description...

BELL-CVE-2025-21853

Bulletin has no description...

BELL-CVE-2024-58089

Bulletin has no description...

CVE-2025-21860

In the Linux kernel, the following vulnerability has been resolved: mm/zswap: fix inconsistency when zswapstorepage fails Commit b7c0ccdfbafd "mm: zswap: support large folios in zswapstore" skips charging any zswap entries when it failed to zswap the entire folio. However, when some base pages ar...

CVE-2024-57348

Cross Site Scripting vulnerability in PecanProject pecan through v.1.8.0 allows a remote attacker to execute arbitrary code via the crafted payload to the hostname, sitegroupid, lat, lon and sitename parameters...

CVE-2025-21845

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: sst: Fix SST write failure 'commit 18bcb4aa54ea "mtd: spi-nor: sst: Factor out common write operation to sstnorwritedata"' introduced a bug where only one byte of data is written, regardless of the number of bytes...

CVE-2025-21848

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfpappctrlmsgalloc Add check for the return value of nfpappctrlmsgalloc in nfpbpfcmsgalloc to prevent null pointer dereference...

CVE-2025-22870 vulnerabilities

Vulnerabilities for packages: vexctl, rke2-runtime, kapp-controller, osv-scanner, hubble-ui, fluent-operator, tkn-fips, x509-certificate-exporter-fips, cloud-provider-azure-fips, velero-plugin-for-aws, neuvector, prometheus-mongodb-exporter, go-discover-fips, kyverno-policy-reporter,...

Duplicate Advisory: Plenti - Code Injection - Denial of Services

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mj4v-hp69-27x5. This link is maintained to preserve external references. Original Description Plenti = 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can...

GHSA-WPXF-3MM2-76F8 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...

CVE-2025-26916

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pixflow Massive Dynamic massive-dynamic.This issue affects Massive Dynamic: from n/a through = 8.2...

RHSA-2025:2627 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2025-21864 tcp: drop secpath at the same time as we currently drop dst

In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hitting the WARN in xfrm6tunnelnetexit while running tests that boil down to: - create a pair of netns - run a basic TCP test over ipcomp6 - delete the...

CVE-2025-21863 io_uring: prevent opcode speculation

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

MAL-2025-2300 Malicious code in client-analytisc-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1413ae1456fe5f357befbd198d3c85b98e8d40e31b0d76c343d1cb6a9dfc9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2319 Malicious code in ledger-node-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7407ff449f6702424fde06ca2cab289054c649439e98f9b863029a985e8cfcf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2252 Malicious code in dir-size-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f803eeed1967e8ae2cd3095d6f293153fe8b5574bbef8aa2191c4b2f862658f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2285 Malicious code in veryimportantdigiasdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4216b87b158de7023dfdcc03968bb866298708f6f98f34877f88eb9e74b20eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...