KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush

...

Linux Distros Unpatched Vulnerability : CVE-2021-45471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items. CVE-2021-45471 Note that Nessus relies on the presence of the package as...

FreeBSD : Vieb -- Remote Code Execution via Visiting Untrusted URLs (aaa060af-88d6-11f0-a294-b0416f0c4c67)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aaa060af-88d6-11f0-a294-b0416f0c4c67 advisory. Zhengyu Liu, Jianjia Yu, Jelmer van Arnhem report: We discovered a remote code execution RCE...

Moderate: resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: requests: Requests vulnerable to .netrc credentials leak via malicious...

CVE-2009-20008

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from unchecked write addresses and could lead to local elevation of privilege...

CVE-2025-3601

An issue has been discovered in GitLab CE/EE affecting all versions from 8.15 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have could have allowed an authenticated user to cause a Denial of Service DoS condition by submitting URLs that generate excessively large responses...

CVE-2009-20008

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

CVE-2009-20008

CVE-2009-20008 concerns Green Dam Youth Escort 3.17, vulnerable to a stack-based buffer overflow in the URL filtering component when processing excessively long URLs. The flaw arises from insufficient input length validation before copying data into a fixed-size buffer, enabling a remote attacker...

CVE-2009-20008

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

CVE-2009-20008 Green Dam 3.17 URL Processing Buffer Overflow

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...

CVE-2010-10016 BS.Player 2.57 Buffer Overflow via M3U Playlist Import

BS.Player version 2.57 build 1051 contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properly validate the length of playlist entries, resulting in a buffer overflow condition. This flaw occurs during parsing of long URLs embedded i...

PT-2025-35364

Name of the Vulnerable Software and Affected Versions: Green Dam Youth Escort version 3.17 Description: Green Dam Youth Escort version 3.17 is susceptible to a stack-based buffer overflow when handling excessively long URLs. The issue is located within the URL filtering component, which does not...

Linux Distros Unpatched Vulnerability : CVE-2021-29424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some...

DEBIAN-CVE-2025-29364

spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READSYSCALL and WRITESYSCALL system calls. The application verifies the legitimacy of the starting and ending addresses for memory read/write operations. By configuring the starting and ending addresses for memory...

CVE-2025-29364

spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READSYSCALL and WRITESYSCALL system calls. The application verifies the legitimacy of the starting and ending addresses for memory read/write operations. By configuring the starting and ending addresses for memory...

PT-2025-35095

Name of the Vulnerable Software and Affected Versions: spimsimulator spim versions prior to 9.1.24 Description: spimsimulator spim versions prior to 9.1.24 are susceptible to a buffer overflow in the READ SYSCALL and WRITE SYSCALL system calls. The application’s verification of starting and endin...

CVE-2025-3601

An issue has been discovered in GitLab CE/EE affecting all versions from 8.15 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have could have allowed an authenticated user to cause a Denial of Service DoS condition by submitting URLs that generate excessively large responses...

CVE-2025-3601

CVE-2025-3601 affects GitLab CE/EE prior to 18.1.5 (from 8.15), prior to 18.2.5 (18.2 line), and prior to 18.3.1 (18.3 line). An authenticated user could trigger a Denial of Service by submitting URLs that yield excessively large responses. Connected sources include security entries referencing G...

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue...