ROOT-OS-DEBIAN-11-CVE-2025-38460 CVE-2025-38460 in linux - Patched by Root

Root has patched CVE-2025-38460 in the linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2025-38460 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38460 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

BELL-CVE-2025-38460

Bulletin has no description...

CVE-2025-38460

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix potential null-ptr-deref in toatmarpd. atmarpd is protected by RTNL since commit f3a0592b37b8 "ATM: clip causes unregister hang". However, it is not enough because toatmarpd is called without RTNL, especially...

CVE-2025-38460 atm: clip: Fix potential null-ptr-deref in to_atmarpd().

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix potential null-ptr-deref in toatmarpd. atmarpd is protected by RTNL since commit f3a0592b37b8 "ATM: clip causes unregister hang". However, it is not enough because toatmarpd is called without RTNL, especially...

SonarSource SonarQube Server < 9.9.4 / 10.x < 10.4 Information Disclosure (CVE-2024-38460)

The version of SonarSource SonarQube Server running on the remote host is prior to 9.9.4 or 10.x prior to 10.4. It is, therefore, affected by an information disclosure vulnerability: - In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are...

org.sonarsource.sonarqube:sonar-application (6.2-rc3) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.2-rc3)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.2-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.2-rc3 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.4-rc2) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.4-rc2)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.4-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.4-rc2 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.2.1) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.2.1)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.2.1 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.5-rc1) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.5-rc1)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.5-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.5-rc1 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.4-rc1) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.4-rc1)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.4-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.4-rc1 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.7.3) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.7.3)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.7.3 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.7.7) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.7.7)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.7.7 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.6) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.6)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.6 Source cves: CVE-2024-38460 Source advisory...

org.sonarsource.sonarqube:sonar-application (6.7.1) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.7.1)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.7.1 Source cves: CVE-2024-38460 Source...

org.sonarsource.sonarqube:sonar-application (6.7-rc1) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (6.7-rc1)

org.sonarsource.sonarqube:sonar-web MAVEN version 6.7-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-web and may be impacted: - org.sonarsource.sonarqube:sonar-application 6.7-rc1 Source cves: CVE-2024-38460 Source...

CVE-2023-38460

creationtimestamp| type| source ---|---|--- 2023-09-04 07:22:09+00:00| seen| https://t.me/cibsecurity/69743...

CVE-2023-38460

Summary of CVE-2023-38460 : Multiple connected sources identify a vulnerability in vowifiservice (linked to Unisoc chipsets) caused by a possible missing permission check. The underlying issue enables local privilege escalation with no additional execution privileges, with CVSS/metrics indicating...

CVE-2022-38460

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in NOTICE BOARD plugin = 1.1 at WordPress...

CVE-2022-38460

CVE-2022-38460 : Authenticated (contributor+) Stored Cross-Site Scripting in the WordPress plugin NOTICE BOARD (versions ≤ 1.1). The vulnerability arises from inadequate data filtering/escaping of user input, enabling XSS when a user with contributor+ privileges interacts with the plugin. Several...