ROOT-OS-UBUNTU-2404-CVE-2025-40349 CVE-2025-40349 in linux - Patched by Root

Root has patched CVE-2025-40349 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-40349

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE 2026-04-18 01:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqcdgwknf22 2026-05-31 16:07:09+00:00| seen|...

CVE-2026-40349

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can escalate their own account to administrator by sending isAdmin=true to PUT /settings/users/userId for their own user ID. The endpoint is intended to let a user ed...

BELL-CVE-2025-40349

Bulletin has no description...

CVE-2025-40349

In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplusbmapalloc hfsplusbmapalloc can trigger a crash if a record offset or length is larger than nodesize 15.264282 BUG: KASAN: slab-out-of-bounds in hfsplusbmapalloc+0x887/0x8b0 15.265192 Read of...

Linux Distros Unpatched Vulnerability : CVE-2025-40349

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfs: validate record offset in hfsplusbmapalloc hfsplusbmapalloc can trigger a crash if a record offset or length is larger than nodesize 15.264282 BUG: KASAN:...

DEBIAN-CVE-2025-40349

In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplusbmapalloc hfsplusbmapalloc can trigger a crash if a record offset or length is larger than nodesize 15.264282 BUG: KASAN: slab-out-of-bounds in hfsplusbmapalloc+0x887/0x8b0 15.265192 Read of...

EUVD-2025-40349

Malicious code in budi-lapis78-sluey npm...

MAL-2025-40349 Malicious code in yarn-wm4ui-8zg7q-keystone-project (npm)

The package yarn-wm4ui-8zg7q-keystone-project was found to contain malicious code...

CVE-2023-40349

Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs...

CVE-2021-40349

e7d Speed Test aka speedtest 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring...

CVE-2023-40349

The CVE-2023-40349 entry concerns Jenkins Gogs Plugin (versions 1.0.15 and earlier). The vulnerability arises from improper initialization of the option intended to secure the webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs. The advisory notes that the webhook endpo...

CVE-2023-40349

Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs...

CVE-2021-40349

creationtimestamp| type| source ---|---|--- 2021-09-27 12:34:37+00:00| seen| https://t.me/cibsecurity/29435...

CVE-2021-40349

e7d Speed Test aka speedtest 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring...

CVE-2021-40349

CVE-2021-40349 affects e7d Speed Test (aka speedtest) 0.5.3. The issue is a path-traversal vulnerability that allows information disclosure via the GET /.. substring. Documented impact is information disclosure; exploitation details are not provided in the sources. CVSS vectors (NVD) indicate a N...