2587 matches found
EUVD-2024-37075
Malicious code in bioql PyPI...
EUVD-2022-31513
Malicious code in bioql PyPI...
USN-7798-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - SMB network file system; - Packet sockets; - Network traffic control; - VMware vSockets driver; ...
USN-7792-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ext4 file system; - Packet sockets; - Network traffic control; - TLS protocol; - VMware vSockets driver; - XFRM...
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
...
CVE-2023-53500 xfrm: fix slab-use-after-free in decode_session6
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decodesession6 When the xfrm device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when the xfrm device sen...
CVE-2023-53500
CVE-2023-53500 concerns the Linux kernel xfrm path. The issue is a slab-use-after-free in decode_session6 that can occur when an xfrm device is enqueued on a qdisc of type sfb, where the skb cb field may be modified during transmission. This leads to a use-after-free on the skb’s memory during IP...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible modification of the cb field of the skb when the xfrm device uses the sfb type qdisc, which could...
OSV-2025-796 Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447958064 Crash type: Heap-buffer-overflow WRITE Crash state: AddGreenToBlueAndRedAVX2 VP8LInverseTransform ProcessRows...
libwebp:[email protected]: Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2
Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5210650793279488 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type:...
ibis-vega-transform (4.0.0), pangsitpy (0.0.3) +1 more potentially affected by CVE-2025-59842 via jupyterlab (2.0.0)
jupyterlab PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 4.0.0 - pangsitpy 0.0.3 - pyomu 0.2.2 Source cves: CVE-2025-59842 Source advisory: OSV:GHSA-VVFJ-2JQX-52JM...
ibis-vega-transform (5.0.0) potentially affected by CVE-2025-59842 via jupyterlab (2.0.2)
jupyterlab PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 5.0.0 Source cves: CVE-2025-59842 Source advisory: OSV:GHSA-VVFJ-2JQX-52JM...
Security Bulletin: IBM webMethods Integration Sever is affected by remote code execution via pub.xslt.transformSerialXML
Summary IBM webMethods Integration Sever is affected by remote code execution via pub.xslt.transformSerialXML. CVE-2025-36202 Vulnerability Details CVEID:CVE-2025-36202 DESCRIPTION: IBM webMethods Integration could allow an authenticated user with required execute Services to execute commands on...
esm.sh has arbitrary file write via path traversal in `X-Zone-Id` header
Summary A path-traversal flaw in the handling of the X-Zone-Id HTTP header allows an attacker to cause the application to write files outside the intended storage location. The header value is used to build a filesystem path but is not properly canonicalized or restricted to the application’s...
GHSA-G2H5-CVVR-7GMW esm.sh has arbitrary file write via path traversal in `X-Zone-Id` header
Summary A path-traversal flaw in the handling of the X-Zone-Id HTTP header allows an attacker to cause the application to write files outside the intended storage location. The header value is used to build a filesystem path but is not properly canonicalized or restricted to the application’s...
Log Injection
Overview io.jenkins.lib:support-log-formatter is a Java logging formatter extracted to a standalone library. Affected versions of this package are vulnerable to Log Injection in the transformMessage function. An attacker can control log message contents by inserting line break characters CR, LF a...
CVE-2022-50341 cifs: fix oops during encryption
In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to read-only memory at virtual address ffff0001221cf000 Mem abort info: ESR =...
Malicious code in transform-remove-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34def0802df34551bb9471a5204d7188e0b1d20db136c605b706bd98166df2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in transform-remove-console
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47354 Malicious code in transform-remove-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34def0802df34551bb9471a5204d7188e0b1d20db136c605b706bd98166df2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...