41488 matches found
AZL-59960 CVE-2025-21948 affecting package kernel for versions less than 5.15.180.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...
AZL-59966 CVE-2025-21919 affecting package kernel for versions less than 5.15.180.1-1
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in childcfsrqonlist childcfsrqonlist attempts to convert a 'prev' pointer to a cfsrq. This 'prev' pointer can originate from struct rq's leafcfsrqlist, making the conversion invalid and...
AZL-60376 CVE-2025-21912 affecting package kernel for versions less than 5.15.180.1-1
In the Linux kernel, the following vulnerability has been resolved: gpio: rcar: Use rawspinlock to protect register access Use rawspinlock in order to fix spurious messages about invalid context when spinlock debugging is enabled. The lock is only used to serialize register access. 4.239592...
AZL-60354 CVE-2025-21898 affecting package kernel for versions less than 5.15.180.1-1
In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in functionstatshow Check whether denominator expression x x - 1 1000 mod 2^32, 2^64 produce zero and skip stddev computation in that case. For now don't care about rec-counter rec-counter...
WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin mFolio Lite versions = 1.2.3...
CVE-2025-21910 wifi: cfg80211: regulatory: improve invalid hints checking
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: regulatory: improve invalid hints checking Syzbot keeps reporting an issue 1 that occurs when erroneous symbols sent from userspace get through into useralpha2 via regulatoryhintuser call. Such invalid regulatory...
USN-7261-2: Vim vulnerability
USN-7261-1 fixed vulnerabilities in Vim. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of...
CVE-2024-2357 affecting package libreswan for versions less than 4.15-1
CVE-2024-2357 affecting package libreswan for versions less than 4.15-1. A patched version of the package is available...
AZL-59523 CVE-2025-3034 affecting package libvorbis 1.3.7-1
Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 137 and Thunderbird 137...
CVE-2025-30876
creationtimestamp| type| source ---|---|--- 2025-04-01 06:40:24+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqbbv3bgy2s 2025-04-01 07:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114261603808938321 2025-04-01 07:48:31+00:00| seen|...
CVE-2025-31689
creationtimestamp| type| source ---|---|--- 2025-04-01 01:54:45+00:00| seen| https://t.me/cvedetector/21673...
Debian: Security Advisory (DLA-4098-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : containerd (ALASDOCKER-2025-054)
The version of containerd installed on the remote host is prior to 1.7.27-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-054 advisory. containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4...
Debian: Security Advisory (DLA-4101-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : thunderbird (ALAS-2025-2807)
The version of thunderbird installed on the remote host is prior to 128.8.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2807 advisory. Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability...
DLA-4106-1 jetty9 - security update
Bulletin has no description...
DLA-4104-1 freetype - security update
Bulletin has no description...
DLA-4108-1 tomcat9 - security update
Bulletin has no description...
Legrand SMS PowerView 安全漏洞
Legrand SMS PowerView is an intelligent power management system from Legrand SMS that allows users to remotely monitor and control power devices via SMS. A security vulnerability exists in Legrand SMS PowerView version 1.x. The vulnerability stems from the fact that incorrect operation of the...