Linux Distros Unpatched Vulnerability : CVE-2025-40113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies...

Linux Distros Unpatched Vulnerability : CVE-2025-40140

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: Remove disruptive netifwakequeue in rtl8150setmulticast syzbot reported WARNING in rtl8150startxmit/usbsubmiturb. This is the sequence of events that...

2025-11 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5068791)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-11 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5068864)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-11 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5068864)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2025-42899

CVE-2025-42899 affects SAP S4CORE (Manage journal entries). The authenticated user can exploit missing authorization checks to escalate privileges within the application. The described impact is limited to confidentiality (low) with no noted impact on integrity or availability. According to the p...

Malicious code in tensor-fi-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e019daea1bdfd44c0cf583f38cd83ec5b2073b8b494e8ff91905e0b2f2f88e The package tensor-fi-utils-lib was found to contain malicious code. Source: ghsa-malware...

MAL-2025-66548 Malicious code in supports-validation-checkerlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781852f3dbd6b5aad45817413559a7dece6950db6702bc4d70d20904897bb099 The package supports-validation-checkerlib was found to contain malicious code. Source: ghsa-malware...

Malicious code in grumpy-squidward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74ed9b405898e2e670d0ae1d0040e8099127e05a3dc50ff19150dd20a290ec4 The package grumpy-squidward was found to contain malicious code. Source: ghsa-malware 54aab923592093f2200b8cd3da7d055731985ce2fd0a384db93136b5277744...

Malicious code in swagger-express-evaluator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b56a0de351341937c692d88411f2d8b6c638192e34d63cef6c3815aa379d278 The package swagger-express-evaluator was found to contain malicious code. Source: ghsa-malware...

Malicious code in vite-plugin-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4552bafe10098b91c4ce3128c885efb1c472d7f7c18b7bca5d2b174ed097e396 The package vite-plugin-postcss-tools was found to contain malicious code. Source: ghsa-malware...

Microsoft Windows Common Log File System Driver 缓冲区错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A buffer error...

RHEL 9 : sssd (RHSA-2025:20954)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20954 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...

Linux Distros Unpatched Vulnerability : CVE-2025-13020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

Important: sssd security update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

SAP GUI for Windows 安全漏洞

SAP GUI for Windows is an interface graphics software for Windows from SAP, Germany. A security vulnerability exists in SAP GUI for Windows that originates from an elevated privilege user being able to locally access sensitive information in the process memory at runtime, potentially resulting in...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from the Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from an unquoted search path vulnerability that could lead to elevation of privilege in Microsoft Windows operating systems...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

ALSA-2025:21020 Important: sssd security update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

Linux Distros Unpatched Vulnerability : CVE-2025-13019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...