23691 matches found
CVE-2025-38403 vsock/vmci: Clear the vmci transport packet properly when initializing it
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmcitransportpacketinit memset the vmcitransportpacket before populating the fields to avoid any uninitialised data being left in the structure...
CVE-2025-38402 idpf: return 0 size for RSS key if not supported
In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning u32 is leading to cast and invalid size value as a result. -EOPNOTSUPP as a size probably will lead to allocation fail. Command: ethto...
CVE-2025-38391 usb: typec: altmodes/displayport: do not index invalid pin_assignments
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pinassignments A poorly implemented DisplayPort Alt Mode port partner can indicate that its pin assignment capabilities are greater than the maximum value, DPPINASSIGNF. In...
CVE-2025-38390 firmware: arm_ffa: Fix memory leak by freeing notifier callback node
In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix memory leak by freeing notifier callback node Commit e0573444edbf "firmware: armffa: Add interfaces to request notification callbacks" adds support for notifier callbacks by allocating and inserting a callba...
CVE-2025-38384
CVE-2025-38384 affects the Linux kernel’s MTD spinand/ECC engine path. The root cause is a memory leak where ECC engine configuration memory allocated during ECC init is not released during spinand cleanup. The leak trace shows kmemleak reporting an unreferenced object during spinand probe/init p...
CVE-2025-38381 Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()
In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50uploadowt The cs40l50uploadowt function allocates memory via kmalloc without checking for allocation failure, which could lead to a NULL pointer dereference. Return...
CVE-2025-38362 drm/amd/display: Add null pointer check for get_first_active_display()
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function modhdcphdcp1enableencryption calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointer if the...
CVE-2025-8138 TOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflow
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formOneKeyAccessButton of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...
CVE-2025-54568
Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for each edge node...
CVE-2025-23276
creationtimestamp| type| source ---|---|--- 2025-07-25 03:34:10+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4iqa7jk2g 2025-08-02 20:17:45+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvgycns3d22j 2025-08-03 02:27:59+00:00| seen|...
CVE-2025-54558
OpenAI Codex CLI before 0.9.0 auto-approves ripgrep aka rg execution even with the --pre or --hostname-bin or --search-zip or -z flag...
CVE-2025-29628
A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 leaving the string vulnerable to interception and modification through a...
CVE-2025-29629
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak default credentials for secure shell access. This may result in attackers gaining access to exposed Gardyn Home Kits...
CVE-2025-45939
The Apwide Golive Jira plugin version 10.2.0 is vulnerable to Server-Side Request Forgery (SSRF) . The root cause is an unauthenticated test webhook function that can be exploited to perform unauthorized server-side requests. Potential impact includes unauthorized access to internal resources. Re...
CVE-2025-51085
creationtimestamp| type| source ---|---|--- 2025-07-24 16:34:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114909175389400814...
CVE-2025-36548
creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:23+00:00| seen| https://infosec.place/objects/cc2a7777-2e45-4874-bf93-dc03dc350ff7...
CVE-2025-8042
creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:57:38+00:00| seen| Telegram/9o4BfNtIOZ97fNW94XQZtKman2tFufd5bSC8ENSBdHyp2c...
CVE-2025-8027
creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2025-07-25 03:32:52+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4gg2y622g 2025-07-29 13:27:06+00:00| seen|...
CVE-2025-8038
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox ignored paths when checking the validity of navigations in a frame...