35585 matches found
kernel security update
3.10.0-1160.119.1.0.14 - HID: core: fix shift-out-of-bounds in hidreportrawevent CVE-2022-48978 Orabug: 38644370 - crypto: seqiv - Handle EBUSY correctly CVE-2023-53373 Orabug: 38644370 - nfsd: don't ignore the return code of svcprocregister CVE-2025-22026 Orabug: 38644370 - netsched: hfsc: Fix a...
PT-2025-51613
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where cls bpf classify can modify tc skb cbskb-drop reason, leading to a warning within sk skb reason drop. This occurs due to an incorrect interaction...
Linux Distros Unpatched Vulnerability : CVE-2025-40355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysfs: check visibility before changing group attribute ownership Since commit 0c17270f9b92 net: sysfs: Implement isvisible for physportid, portname, switchid,...
PT-2025-51571
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.1-1-mainline 1...
The vulnerability of the dsa_switch_shutdown() function in the net/dsa/dsa2.c module exposes a flaw in the support for Linux kernel distributed architecture switches, allowing an attacker to trigger a service failure.
The vulnerability of the dsaswitchshutdown function in the net/dsa/dsa2.c module, which supports Linux kernel with distributed architecture switches, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-14706
A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/httpeshellserver of the component NETREBOOT Interface. Such manipulation leads to command injection. The attack can be launched remotely. The exploit is publicly available and mig...
The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability allows an attacker to cause a service failure...
PT-2025-51235
Name of the Vulnerable Software and Affected Versions Convercent Whistleblowing Platform versions affected versions not specified Description The application exhibits a protection mechanism failure in browser and session handling. It lacks essential HTTP security headers, including...
The vulnerability of the net/mlx5 component in the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the net/mlx5 component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the net/tls component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the net/tls component in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability in the driver net/usb/asix_devices.c of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/usb/asixdevices.c driver of the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability in the net/packet/af_packet.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...
OESA-2025-2803 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blocktouchbuffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer...
OPENSUSE-SU-2025:20158-1 Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.11. Security issues fixed: - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames bsc1251257. - CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU sparse map bsc1251261. - CVE-2025-58185:...
CVE-2025-34395
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution ...
EulerOS 2.0 SP13 : golang (EulerOS-SA-2025-2500)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2522)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in skbunclonekeeptruesizeCVE-2022-49142...
The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to an uncontrolled recursion. Exploiting this vulnerability allows an attacker to cause a service failure...
.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL
New research has uncovered exploitation primitives in the .NET Framework that could be leveraged against enterprise-grade applications to achieve remote code execution. WatchTowr Labs, which has codenamed the "invalid cast vulnerability" SOAPwn , said the issue impacts Barracuda Service Center RM...
EUVD-2025-202434
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution ...