PT-2025-31176 · Citrix · Citrix Netscaler

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler affected versions not specified Description: The vulnerability is a denial of service issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer version that...

CVE-2025-54767

The Xorux LPAR2RRD server performance monitoring platform (versions 8.04 and prior ) is vulnerable to a Denial of Service attack due to CWE-648: Incorrect Use of Privileged APIs . An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2...

CVE-2025-54419

creationtimestamp| type| source ---|---|--- 2025-07-28 22:57:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ouzjcra2j 2025-07-31 20:47:46+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvbz2hwopk2c...

CVE-2025-54298

creationtimestamp| type| source ---|---|--- 2025-07-28 19:58:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ewg5f6l2j...

CVE-2025-8283 Netavark: podman: netavark may resolve hostnames to unexpected hosts

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be us...

CVE-2025-38483

In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: / only irqs 2, 3, 4, 5, 6, 7, 10, 11, 12, 14, and 15 are valid / if 1 options1 & 0xdcfc However, it-optionsi is an...

CVE-2025-7676

CVE-2025-7676 describes a DLL hijacking issue affecting Windows 11 for ARM64, where PE32 executables may load Base DLLs from the application directory. The underlying weakness is that ARM64 Windows loads certain DLLs from the executable’s directory, enabling code execution if an attacker can plac...

CVE-2025-54529

In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration...

CVE-2025-38470

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" feature is enabled on a net device, the 8021q module will automatically add or remove VLAN 0 when the net device is put...

CVE-2025-38491

In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcpdofallback net/mptcp/protocol.h:1223 inline WARNING: CPU: 1 PID: 7704 at...

CVE-2025-38482

In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: / IRQs 2,3,5,6,7, 10,11,15 are valid for "enhanced" mode / if 1 options1 & 0x8cec However, it-optionsi is an...

CVE-2025-38469

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...

CVE-2025-38497

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qwsign' or 'landingPage' sysfs attributes, the store functions attempt to access pagel - 1 before validating that the length 'l' is...

CVE-2025-38478

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions that write to subdevice Some Comedi subdevice instruction handlers are known to access instruction data elements beyond the first insn-n elements in some cases. The doinsnioctl...

CVE-2025-38473

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix null-ptr-deref in l2capsockresumecb syzbot reported null-ptr-deref in l2capsockresumecb. 0 l2capsockresumecb has a similar problem that was fixed by commit 1bff51ea59a9 "Bluetooth: fix use-after-free error in...

CVE-2025-27801

creationtimestamp| type| source ---|---|--- 2025-07-28 13:28:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzp3qwjvb2h...

CVE-2025-6918

creationtimestamp| type| source ---|---|--- 2025-07-28 13:04:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luznrb4jdq2t...

CVE-2025-4056

CVE-2025-4056 affects GLib. The issue is a denial-of-service on Windows when an application spawns a program with long command lines. Public sources in connected advisories note GLib vulnerability details and remediation: upgrading GLib to a patched release (e.g., GLib 2.84.1+ per EulerOS/Nessus ...

CVE-2025-38475

In the Linux kernel, the following vulnerability has been resolved: smc: Fix various oops due to inetsock type confusion. syzbot reported weird splats 01 in cipsov4socksetattr while freeing inetsksk-inetopt. The address was freed multiple times even though it was read-only memory...

CVE-2025-38469

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...