5150 matches found
CVE-2025-9648 affecting package ceph for versions less than 16.2.10-10
CVE-2025-9648 affecting package ceph for versions less than 16.2.10-10. A patched version of the package is available...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-11678
Stack-based Buffer Overflow in lwsadnsparselabel in warmcat libwebsockets allows, when the LWSWITHSYSASYNCDNS flag is enabled during compilation, to overflow the labelstack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer...
ROS-20251020-01
Vulnerability in open source external resource management software Terraform is associated with an incorrect restriction on the path name of a restricted directory. Exploitation of the vulnerability could allow an attacker to download arbitrary files...
SUSE CVE-2025-60361
radare2 v5.9.8 and before contains a memory leak in the function bochsopen...
CVE-2025-60360
radare2 v5.9.8 and before contains a memory leak in the function r2rsubprocessinit...
CVE-2025-62375 vulnerabilities
Vulnerabilities for packages: tekton-chains, tkn...
GHSA-RCV9-QM8P-9P6J vulnerabilities
Vulnerabilities for packages: text-generation-inference...
CVE-2025-62490
In quickjs, in jsprintobject, when printing an array, the function first fetches the array length and then loops over it. The issue is, printing a value is not side-effect free. An attacker-defined callback could run during jsprintvalue, during which the array could get resized and len1 become ou...
CVE-2025-10729 affecting package qtsvg for versions less than 6.6.1-3
CVE-2025-10729 affecting package qtsvg for versions less than 6.6.1-3. A patched version of the package is available...
GHSA-C2HV-4PFJ-MM2R vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This...
GHSA-R657-RXJC-J557 vulnerabilities
Vulnerabilities for packages: ruby3.2-rack, ruby3.4-rack, kube-fluentd-operator, ruby4.0-rack, ruby3.3-rack...
CVE-2025-39974
In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix slab-out-of-bounds in parseintegerlimit When config osnoise cpus by write syscall, the following KASAN splat may be observed: BUG: KASAN: slab-out-of-bounds in parseintegerlimit+0x103/0x130 Read of size 1 at...
CVE-2025-54278
Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...
CVE-2025-61911 vulnerabilities
Vulnerabilities for packages: awx...
CVE-2025-11715
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...
CVE-2025-11731
A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...
CVE-2025-11731
A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...