7010 matches found
EUVD-2025-25183
Malicious code in bioql PyPI...
EUVD-2024-15907
Malicious code in bioql PyPI...
EUVD-2025-25796
Malicious code in bioql PyPI...
EUVD-2023-38479
Malicious code in bioql PyPI...
CVE-2025-39892
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on sndsoclookupcomponentnolocked soc-generic-dmaengine-pcm.c uses same dev for both CPU and Platform. In such case, CPU component driver might not have driver-name, then...
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.
...
PT-2025-40346
Vulnerabilities in automotive Memory Protection Unit MPU CVE-2023-48010 and CVE-2024-33882 2024 https://t.co/6uScL3wIzO infosec https://t.co/X5CzbiqShT...
CVE-2025-60663
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function...
CVE-2023-53517
In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu, e.g. 4 in Shuang's testing, without checking for the minimum mtu,...
UBUNTU-CVE-2023-53517
In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu, e.g. 4 in Shuang's testing, without checking for the minimum mtu,...
CVE-2023-53517
Summary: CVE-2023-53517 affects the Linux kernel’s TIPC MTU negotiation logic. A malicious peer could send an Activate message with an extremely small MTU (e.g., 4), causing l->mtu to drop to 4 in tipc_link_proto_rcv() and leading to an overflow when computing MTU-related values (e.g., 4 - INT...
CVE-2025-39906
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of the GPU would leave the oem i2c adapter registered resulting in a null pointer dereference when applications try to access the invalid device. cherr...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the minimum mtu value, which could result in an integer overflow and memory corruption...
PT-2025-40080
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where unbinding of the GPU could leave the OEM I2C adapter registered. This could lead to a null pointer dereference when applications attempt to access...
IBM License Metric Tool Access Control Vulnerability
The IBM License Metric Tool is a free tool from International Business Machines IBM that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs. An Access Control Error vulnerability exists in IBM License Metric Tool...
powerpc/pseries/iommu Linux DoS
The vulnerability of the powerpc/pseries/iommu component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux DoS
The vulnerability of the drivers/gpu/drm/xe components of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Kernel Data Compromise
The vulnerability of components such as drivers, GPU, DRM, and VKMS in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
Denial Of Service (DoS)
github.com/hashicorp/vault is vulnerable to Denial of Service DoS. The vulnerability is due to processing specially crafted complex payloads within the default request size limit, which allows an attacker to consume excessive memory and CPU resources...