44181 matches found
SUSE SLES15 Security Update : libjxl (SUSE-SU-2025:01883-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01883-1 advisory. - CVE-2024-11403: Fix out of bounds memory read/write in libjxl bsc1233768. Tenable has extracted the preceding description block directly from the SU...
UBUNTU-CVE-2025-52555
Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...
CVE-2025-52555 CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS
Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is tha...
CVE-2025-52555
Ceph CephFS vulnerability CVE-2025-52555 affects Ceph versions 17.2.7, 18.2.1–18.2.4, and 19.0.0–19.2.2 where an unprivileged user can escalate to root by chmod 777 a directory owned by root on a ceph-fuse mounted CephFS. The attacker gains read/write/execute access to any root-owned directory, i...
PT-2025-27012
Name of the Vulnerable Software and Affected Versions: Ceph versions 17.2.7, 18.2.1 through 18.2.4, 19.0.0 through 19.2.2 Description: Ceph is a distributed object, block, and file storage platform. An unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by changing the...
Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.
Summary IBM Storage Protect Server uses IBM Db2 and may be affected by multiple vulnerabilities which could lead to denial of service, remote code execution or loss of confidentiality, integrity or availability. CVE-2023-39976, CVE-2023-40373, CVE-2023-40372, CVE-2023-30987, CVE-2023-38719,...
wildfly: unsafe deserialization in Wildfly Enterprise Java Beans
A flaw was found in Wildfly. A remote deserialization attack is possible in the Enterprise Application Beans EJB due to lack of validation/filtering capabilities in wildfly. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availablity...
undertow: special character in query results in server errors
A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability...
VulnCheck KEV: CVE-2024-54085
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...
PT-2025-48909
Уязвимость компонента drivers/md/dm-crypt.c ядра операционной системы Linux связана c взаимной блокировкой потоков выполнения. Эксплуатация уязвимости позволяет нарушителю нарушить оказать воздействие на целостность и доступность защищаемой информации...
RISC-V Linux Get Overflow Stack
The vulnerability of the getoverflowstack function in the arch/riscv/kernel/traps.c module of the module management subsystem for the RISC-V architecture-based Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an...
drivers/mcb/mcb-core.c Heap Buffer Overflow DoS
Vulnerability of the mcballocbus function in the drivers/mcb/mcb-core.c module – The Linux kernel’s MEN Chameleon Bus driver relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
iocg_pay_debt Heap Buffer Overflow DoS
The vulnerability of the iocgpaydebt function in the block/blk-iocost.c module, which supports the block-level kernel in the Linux operating system, is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
Linux JFS dbAllocBits Heap Buffer Overflow
The vulnerability of the dbAllocBits function in the fs/jfs/jfsdmap.c module of the Linux file system support module JFS is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
mac80211 Stack Buffer Overflow
The vulnerability of the ieee80211checkfastxmit function in the net/mac80211/tx.c module of the mac80211 stack in the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux kernel Btrfs __get_cur_name_and_parent function Data Compromise
The vulnerability of the getcurnameandparent function in the fs/btrfs/send.c module of the Linux file system support module is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromi...
CVE-2025-6434
creationtimestamp| type| source ---|---|--- 2025-06-24 16:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsekkcoiaq2o 2025-06-25 14:51:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19459...
TOTOLINK T10 Trust Management Issue Vulnerability
TOTOLINK T10 is a wireless network system router from China's Gion Electronics TOTOLINK. The TOTOLINK T10 suffers from a trust management issue vulnerability that stems from the use of hard-coded passwords in the file /etc/shadow.sample. An attacker could exploit the vulnerability to cause...
rweather library Crypto Data Compromise
The vulnerability of the rweather library and the crypto-based solutions for organizing tactical radio communications in hard-to-access areas like Meshtastic is related to insufficient entropy during key generation. Exploiting this vulnerability allows a remote attacker to compromise the...
