Malicious code in vivid_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3074c2be0ff97b86a776b0f7f1a620c0c2fd8301f70a79b82bc6a594837e1eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49069

Malicious code in vividelkz3n npm...

MAL-2025-61599 Malicious code in vivid_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3074c2be0ff97b86a776b0f7f1a620c0c2fd8301f70a79b82bc6a594837e1eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990444 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988771 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: media: vivid: The size of the composition has been changed. syzkaller discovered a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern, drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987574 advisory. In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page...

EUVD-2025-20030

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-38226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern...

Malicious code in test-mlw2-parts-vivid (npm)

The package test-mlw2-parts-vivid was found to contain malicious code...

Malicious code in test-mlw2-vivid-ashes-creek-fores (npm)

The package test-mlw2-vivid-ashes-creek-fores was found to contain malicious code...

MAL-2025-35399 Malicious code in test-mlw2-geare-vivid (npm)

The package test-mlw2-geare-vivid was found to contain malicious code...

MAL-2025-38516 Malicious code in vivid-shimmer-dqh065-project (npm)

The package vivid-shimmer-dqh065-project was found to contain malicious code...

Malicious code in test-mlw2-geare-vivid (npm)

The package test-mlw2-geare-vivid was found to contain malicious code...

MAL-2025-36587 Malicious code in test-mlw2-vivid-ashes-creek-fores (npm)

The package test-mlw2-vivid-ashes-creek-fores was found to contain malicious code...

Malicious code in vivid-shimmer-dqh065-project (npm)

The package vivid-shimmer-dqh065-project was found to contain malicious code...

MAL-2025-35947 Malicious code in test-mlw2-parts-vivid (npm)

The package test-mlw2-parts-vivid was found to contain malicious code...

CVE-2025-55193

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in...

Linux Distros Unpatched Vulnerability : CVE-2022-48945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page fault for address: ffffc9000a3b1000 PF: supervisor write access...

Linux Distros Unpatched Vulnerability : CVE-2019-18683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distribution...