6445 matches found
AZL-66521 CVE-2025-38578 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fssyncinodemeta syzbot reported an UAF issue as below: 1 2 1 https://syzkaller.appspot.com/text?tag=CrashReport&x=16594c60580000 ================================================================== BUG:...
CVE-2025-38593 Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix double free in 'hcidiscoveryfilterclear' Function 'hcidiscoveryfilterclear' frees 'uuids' array and then sets it to NULL. There is a tiny chance of the following race: 'hcicmdsyncwork'...
CVE-2025-49047
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeross DigitalOcean Spaces Sync do-spaces-sync allows Stored XSS.This issue affects DigitalOcean Spaces Sync: from n/a through = 2.2.1...
CVE-2025-38538 dmaengine: nbpfaxi: Fix memory corruption in probe()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe The nbpf-chan array is allocated earlier in the nbpfprobe function and it has "numchannels" elements. These three loops iterate one element farther than they should and corrupt...
Security Updates for Azure File Sync Agent (August 2025)
The Microsoft Azure File Sync Agent running on the remote host is prior to 18.3, 19.x prior to 19.2, 20.x prior to 20.1, or 21.x prior to 21.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the...
Malicious code in apple_portal_sync (npm)
The package appleportalsync was found to contain malicious code...
Malicious code in browser-sync-task-runner (npm)
The package browser-sync-task-runner was found to contain malicious code...
Malicious code in magnetosphere-tectonic-eleventy-sync (npm)
The package magnetosphere-tectonic-eleventy-sync was found to contain malicious code...
Malicious code in memoize-sync (npm)
The package memoize-sync was found to contain malicious code...
Malicious code in sync-color (npm)
The package sync-color was found to contain malicious code...
Malicious code in slate-sync (npm)
The package slate-sync was found to contain malicious code...
Malicious code in sync-superagent-forever-singularitarianism (npm)
The package sync-superagent-forever-singularitarianism was found to contain malicious code...
Malicious code in sync-chalk-cygnus-arcturus (npm)
The package sync-chalk-cygnus-arcturus was found to contain malicious code...
Malicious code in accretion-puppeteer-pegasus-sync (npm)
The package accretion-puppeteer-pegasus-sync was found to contain malicious code...
MAL-2025-34334 Malicious code in sync-yaml-command-ganymede (npm)
The package sync-yaml-command-ganymede was found to contain malicious code...
MAL-2025-22389 Malicious code in hercules-centaurus-oberon-sync (npm)
The package hercules-centaurus-oberon-sync was found to contain malicious code...
MAL-2025-34328 Malicious code in sync-astrochemistry-lithosphere-cordelia (npm)
The package sync-astrochemistry-lithosphere-cordelia was found to contain malicious code...
Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)
The package unuk-morgan-mini-css-extract-plugin-sync was found to contain malicious code...
brick (0.0.0), duo-parse (0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2, <=2.0.0)
memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...