26775 matches found
CVE-2025-39714 media: usbtv: Lock resolution while streaming
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming ffplay and another program qv4l2 changes the TV standard from NTSC to PAL, the kernel crashes due to trying to copy to unmapped memory. Changing from NTSC...
Malicious code in standard-dangerous-blew (npm)
The package standard-dangerous-blew was found to contain malicious code...
Malicious code in oauth-standard-umbra-antares (npm)
The package oauth-standard-umbra-antares was found to contain malicious code...
MAL-2025-46137 Malicious code in standard-dangerous-blew (npm)
The package standard-dangerous-blew was found to contain malicious code...
MAL-2025-45359 Malicious code in non-blocking-sirius-standard-darkenergy (npm)
The package non-blocking-sirius-standard-darkenergy was found to contain malicious code...
Malicious code in non-blocking-sirius-standard-darkenergy (npm)
The package non-blocking-sirius-standard-darkenergy was found to contain malicious code...
MAL-2025-43534 Malicious code in async-xerxes-standard-tethys (npm)
The package async-xerxes-standard-tethys was found to contain malicious code...
MAL-2025-45579 Malicious code in postgres-futurology-standard-postcss (npm)
The package postgres-futurology-standard-postcss was found to contain malicious code...
CVE-2025-26416
In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2022-30126
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by...
CVE-2025-7071 Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library
Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations...
CVE-2025-7071
The CVE concerns Oberon microsystems AG ocrypto library. A padding oracle timing side-channel in AES-CBC decryption with PKCS#7 padding exists for ocrypto versions 3.1.0 through 3.9.1 (i.e., all versions since 3.1.0 up to but not including 3.9.2). Attackers could recover plaintexts by measuring d...
SUSE CVE-2025-27558
IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. In mesh networks using Wi-Fi Protected Access WPA, WPA2, or WPA3 or Wired Equivalent Privacy WEP, an adversary can exploit this vulnerability to inject arbitrary frames towards devices that support receiving non-SSP...
Trend Vision One™ Email Security Raises the Standard
Learn all the new aspects of Trend Vision One™ Email Security and how it's raising the standard of effectiveness for the industry...
Linux Distros Unpatched Vulnerability : CVE-2022-21366
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are...
[SECURITY] Fedora 41 Update: python3.13-3.13.7-1.fc41
Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...
Malicious code in @espace-client-axafr/standard-card (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @espace-client-axafr/dashboard-standard-card (npm)
The package communicates with a domain associated with malicious activity...
