23591 matches found
CVE-2025-43239
creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-678/...
CVE-2025-54766
creationtimestamp| type| source ---|---|--- 2025-07-29 01:10:33+00:00| seen| https://bsky.app/profile/jimbecher.bsky.social/post/3lv2wdmsm4s2k...
PT-2025-31176 · Citrix · Citrix Netscaler
Name of the Vulnerable Software and Affected Versions: Citrix NetScaler affected versions not specified Description: The vulnerability is a denial of service issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer version that...
CVE-2025-28170
Grandstream Networks GXP1628 =1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files...
CVE-2025-54767
The CVE-2025-54767 issue affects Xorux LPAR2RRD: versions 8.04 and prior are vulnerable to a denial-of-service described as an authenticated, read-only user being able to terminate processes on the Xormon Original virtual appliance as the lpar2rrd user. Underlying cause involves an endpoint (repo...
CVE-2025-54419
creationtimestamp| type| source ---|---|--- 2025-07-28 22:57:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ouzjcra2j 2025-07-31 20:47:46+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvbz2hwopk2c...
CVE-2025-54298
creationtimestamp| type| source ---|---|--- 2025-07-28 19:58:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ewg5f6l2j...
CVE-2025-8283 Netavark: podman: netavark may resolve hostnames to unexpected hosts
A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be us...
CVE-2025-38483
In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: / only irqs 2, 3, 4, 5, 6, 7, 10, 11, 12, 14, and 15 are valid / if 1 options1 & 0xdcfc However, it-optionsi is an...
CVE-2025-7676
CVE-2025-7676 describes a DLL hijacking issue affecting Windows 11 for ARM64, where PE32 executables may load Base DLLs from the application directory. The underlying weakness is that ARM64 Windows loads certain DLLs from the executable’s directory, enabling code execution if an attacker can plac...
CVE-2025-54529
In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration...
CVE-2025-38470
In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" feature is enabled on a net device, the 8021q module will automatically add or remove VLAN 0 when the net device is put...
CVE-2025-38491
In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcpdofallback net/mptcp/protocol.h:1223 inline WARNING: CPU: 1 PID: 7704 at...
CVE-2025-38482
In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: / IRQs 2,3,5,6,7, 10,11,15 are valid for "enhanced" mode / if 1 options1 & 0x8cec However, it-optionsi is an...
CVE-2025-38469
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...
CVE-2025-38497
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qwsign' or 'landingPage' sysfs attributes, the store functions attempt to access pagel - 1 before validating that the length 'l' is...
CVE-2025-38478
In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions that write to subdevice Some Comedi subdevice instruction handlers are known to access instruction data elements beyond the first insn-n elements in some cases. The doinsnioctl...
CVE-2025-38473
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix null-ptr-deref in l2capsockresumecb syzbot reported null-ptr-deref in l2capsockresumecb. 0 l2capsockresumecb has a similar problem that was fixed by commit 1bff51ea59a9 "Bluetooth: fix use-after-free error in...