CVE-2025-26482

CVE-2025-26482 affects Dell PowerEdge Server BIOS and Dell iDRAC9 (all versions). The vulnerability is described as an Information Disclosure flaw that could be exploited by a remote attacker with high privileges and network access; impact is confidentiality loss with no integrity/availability im...

Security update for curl

This update for curl fixes the following issues: CVE-2025-9086: Fixed Out of bounds read for cookie path bsc1249191 CVE-2025-10148: Predictable WebSocket mask bsc1249348 Fix the --ftp-pasv option in curl v8.14.1 bsc1246197 tooloperate: fix return code when --retry is used but not triggered...

Dell PowerEdge Server BIOS和Dell iDRAC9 安全漏洞

Dell PowerEdge Server BIOS and Dell iDRAC9 are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver.Dell iDRAC9 is a system update driver that provides comprehensive, embedded management, and automation features for the entire PowerEdge family of servers. automation...

kernel security update

3.10.0-1160.119.1.0.12 - scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 Orabug: 38414589 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 Orabug: 38414589...

PT-2025-39457

Name of the Vulnerable Software and Affected Versions Dell PowerEdge Server BIOS and Dell iDRAC9 affected versions not specified Description A high privileged attacker with remote access could potentially exploit an Information Disclosure issue. This could lead to the disclosure of information...

drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()

...

OESA-2025-2299 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...

OESA-2025-2298 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...

Oracle Linux 10 : kernel (ELSA-2025-15782)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15782 advisory. - xfrm: interface: fix use-after-free after changing collectmd xfrm interface - CVE-2025-38500 - idpf: convert control queue mutex to a spinlock -...

CVE-2025-59415

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sanitize the content uploaded in the profile bio. Malicious SVG files could be used to execute...

CVE-2025-59415 Frappe Learning vulnerable to Malicious Content upload via Profile bio field

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sanitize the content uploaded in the profile bio. Malicious SVG files could be used to execute...

PT-2025-38279

Name of the Vulnerable Software and Affected Versions: Frappe Learning versions 2.34.1 and below Description: Frappe Learning does not adequately sanitize content uploaded in the profile bio. This allows for the execution of arbitrary scripts in the context of other users through malicious SVG...

Linux Distros Unpatched Vulnerability : CVE-2022-50287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: fix a memory leak in generatelfpdataptrs When size != 0 || ptrs-lvds entries ...

SUSE CVE-2022-50275

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios information from ACPI table in radeonacpivfctbios, it misses to call acpiputtable to release the ACPI memory after the init, so add...

SUSE CVE-2022-50287

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: fix a memory leak in generatelfpdataptrs When size != 0 || ptrs-lvds entries != 3, the program tries to free the ptrs. However, the ptrs is not created by calling kzmalloc, but is obtained by pointer offset...

CVE-2023-53305

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2caplecommandrej. Mitigation To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modul...

Linux Distros Unpatched Vulnerability : CVE-2022-50275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios information from ACPI table in radeonacpivfctbios, it misses to...

Medium: edk2

Issue Overview: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. CVE-2024-38805 Affected Packages: edk2 Note: This advisory is applicable to Amazon Linux ...

AlmaLinux 9 : kernel (ALSA-2025:15661)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15661 advisory. kernel: drm/vkms: Fix use after free and double free on init error CVE-2025-22097 kernel: scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 kernel:...

Amazon Linux 2 : edk2, --advisory ALAS2-2025-2996 (ALAS-2025-2996)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2996 advisory. EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. CVE-2024-388...