Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not marking certain pins as invalid interrupts, which could lead to a user-space triggered bug...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failed assertion when building a free-space tree, which could lead to a system crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to consider the skbsharedinfo memory space, which could result in a buffer error...

Linux Distros Unpatched Vulnerability : CVE-2023-53035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix kernel-infoleak in nilfsioctlwrapcopy The ioctl helper function nilfsioctlwrapcopy, which exchanges a metadata array to/from user space, may copy...

Linux Distros Unpatched Vulnerability : CVE-2019-1010024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE:...

Linux Distros Unpatched Vulnerability : CVE-2021-38203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service deadlock via processes that trigger allocation of new system chunks during...

Linux Distros Unpatched Vulnerability : CVE-2025-38166

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: fix ktls panic with sockmap 2172.936997 ------------ cut here ------------ 2172.936999 kernel BUG at lib/ioviter.c:629! ...... 2172.944996 PKRU: 55555554...

Malicious code in doggy-space-nft-collection334 (npm)

The package doggy-space-nft-collection334 was found to contain malicious code...

MAL-2025-39910 Malicious code in xo-space (npm)

The package xo-space was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c714200e1f1a835c8bc557fe64c303acb1653f9e6dffcce0bbfa0e1bf1545800 This package installs a dependency hosted on a custom domain that runs an info...

MAL-2025-18592 Malicious code in doggy-space-nft-collection334 (npm)

The package doggy-space-nft-collection334 was found to contain malicious code...

MAL-2025-18593 Malicious code in doggy-space-nft-collection946 (npm)

The package doggy-space-nft-collection946 was found to contain malicious code...

Malicious code in xo-space (npm)

The package xo-space was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c714200e1f1a835c8bc557fe64c303acb1653f9e6dffcce0bbfa0e1bf1545800 This package installs a dependency hosted on a custom domain that runs an info...

Malicious code in doggy-space-nft-collection946 (npm)

The package doggy-space-nft-collection946 was found to contain malicious code...

MAL-2025-9239 Malicious code in @post-office-placement/screen-space-flags (npm)

The package @post-office-placement/screen-space-flags was found to contain malicious code...

CVE-2025-54458

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint...

CVE-2025-48731

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the user does not have access for via edit subscription endpoint...

CVE-2025-55005 ImageMagick: heap-buffer overflow in log colorspace handling

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024...

CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

ImageMagick 安全漏洞

ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from a buffer overflow vulnerability that originates from not handling reference values greater than 1024 during Log to sRGB...

Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...