CVE-2022-49122

CVE-2022-49122 is a Linux kernel vulnerability affecting the dm ioctl path where user-supplied data could act as an index and enable Spectre v1 gadget behavior. The fix, described in connected advisories, prevents leakage of kernel memory to userspace by applying array_index_nospec to index handl...

CVE-2025-21091

When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-20175

CVE-2025-20175 describes a DoS vulnerability in the SNMP subsystem of Cisco IOS Software, IOS XE, and IOS XR caused by improper error handling when parsing SNMP requests. An authenticated, remote attacker can exploit this by sending a crafted SNMP request, potentially forcing the device to reload...

Malicious code in drift-v1-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8e83d9fff21b8fd67210fa3db37e1aec46e02dc3da9b43ebbc8ce199d20723 Any computer that has this package installed or running should be considered...

MAL-2025-1215 Malicious code in drift-v1-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8e83d9fff21b8fd67210fa3db37e1aec46e02dc3da9b43ebbc8ce199d20723 Any computer that has this package installed or running should be considered...

CVE-2025-21311

Windows NTLM V1 Elevation of Privilege Vulnerability...

CVE-2025-21311

Windows NTLM V1 Elevation of Privilege Vulnerability...

Windows NTLM V1 Elevation of Privilege Vulnerability

...

SUSE CVE-2024-5660

Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass o...

VulnCheck KEV: CVE-2024-50603

Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloudtype for listflightpathdestinationinstances, or srccloudtype for flightpathconnectiontest...

libreswan: Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...

Improper Input Validation

Overview sigstore is an A tool for signing Python package distributions Affected versions of this package are vulnerable to Improper Input Validation due to the integration time verification process. An attacker can induce a Denial of Service by modifying the integration timestamp within a bundle...

ARM多款产品 安全漏洞

The ARM Cortex-A77, among others, is a central processing unit from the British company ARM. A security vulnerability exists in various Arm products, which stems from the possibility that memory accesses may be incorrectly converted. The following products are affected: ARM Cortex-A77, ARM...

MAL-2024-11423 Malicious code in prismjs-editor-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-35984 · Victure · Victure Rx1800 Wifi 6 Router

Name of the Vulnerable Software and Affected Versions: Victure RX1800 WiFi 6 Router version EN V1.0.0 r12 110933 Description: A problem was discovered in Victure RX1800 WiFi 6 Router devices, where a remote attacker in proximity to a Wi-Fi network can derive the default Wi-Fi PSK value via the la...

Malicious code in distdiscord-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df4e3ffa3125383f7eefd22447c1d5f54c29993ca1aa53c9fa243ddd464e0c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notworking-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da772f6092546f23222b6903ba819da287d6088d1a5e448aefbd364e65498413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11150 Malicious code in notworking-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da772f6092546f23222b6903ba819da287d6088d1a5e448aefbd364e65498413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11137 Malicious code in distdiscord-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df4e3ffa3125383f7eefd22447c1d5f54c29993ca1aa53c9fa243ddd464e0c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.17.0 release

Red Hat OpenShift Dev Spaces 3.17 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. This includes fixes to Critical CVE-2024-21534. Following the Red Hat Product Security standards this update is rated as having a security impact of...