PT-2025-4319

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the Linux kernel, where using the 'net' structure via 'current' is not recommended due to inconsistency and potential null pointer dereferences. The 'net' structure can be...

PT-2025-4322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, specifically the mptcp subsystem and its handling of the blackhole timeout via sysctl. The problem arises from using the net structure via current,...

PT-2025-4317

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the use of the current-nsproxy in the Linux kernel, specifically in the sctp module. This usage is not recommended due to inconsistency and potential null pointer dereference...

PT-2025-4320

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the Linux kernel, where using the 'net' structure via 'current' is not recommended due to inconsistency and potential null pointer dereferences. The 'net' structure can be...

PT-2025-4318

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the use of current-nsproxy in the Linux kernel, which is not recommended due to inconsistency and potential null pointer dereferences. The net structure can be obtained from...

Security update for gtk3

This update for gtk3 fixes the following issues: CVE-2024-6655: Fixed library injection from current working directory bsc1228120. Other fixes: - Updated to version 3.24.43 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

CVE-2024-56409

creationtimestamp| type| source ---|---|--- 2025-01-03 16:52:48+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-j2xg-cjcx-4677 2025-01-03 17:09:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113765525095900326 2025-01-03...

PT-2026-5994

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the btrfs subsystem related to transaction handling. Specifically, the wait current trans function does not properly consider transaction types when...

PT-2025-47801

Name of the Vulnerable Software and Affected Versions GnuTLS versions 15.0 and -current GnuTLS versions prior to Fedora 43 Description A stack overflow issue exists in GnuTLS. The issue is related to a flaw that could potentially allow for malicious exploitation. Recommendations Update GnuTLS to...

PT-2026-2876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the initialization of the cpu tasks array. The issue occurs because the array is not initialized statically, leading to potential crashes whe...

Delta Electronics DRASimuCAD 安全漏洞

Delta Electronics DRASimuCAD is an integrated platform for robot simulation. A type confusion vulnerability exists in Delta Electronics DRASimuCAD, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

DEBIAN-CVE-2024-56563

In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in cephmdscheckaccess getcurrentcred increments the reference counter, but the putcred call was missing...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the cred pointer not being passed correctly in the ceph module, resulting in redundant getcurrentcred calls and...

The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from buffer overflows in the queue, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from an overflow in the buffer area. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created file...

CVE-2022-44514

Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena Simulation is the American Rockwell Rockwell Automation company's set of simulation software to provide 3D animation and graphics capabilities. A memory misreference code execution vulnerability exists in the Rockwell Automation Arena Simulation DOE file that can be...

CISCO-SA-20190501-PNR

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:52+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794671188407...

CVE-2024-55918: Improper Control of Generation of Code

An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory...

PT-2024-36610 · Unknown · Graphics::Colornames

Name of the Vulnerable Software and Affected Versions: Graphics::ColorNames versions prior to 3.2.0 Description: The issue is related to an ambiguity between modules and filenames in the Graphics::ColorNames package for Perl, which can lead to HTML injection by an attacker who can create a file i...

CVE-2024-28143

The Image Access Scan2Net software (versions 7.40 and earlier , 7.42 and earlier , and 7.42B and earlier ) contains a vulnerability in its password change function at /cgi/admin.cgi . The root cause is that the application fails to require the current or old password during a password change. Thi...