1053 matches found
CVE-2025-22038
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero numsubauth before subauth is accessed Access psid-subauthpsid-numsubauth - 1 without checking if numsubauth is non-zero leads to an out-of-bounds read. This patch adds a validation step to ensure numsubauth !...
CVE-2025-23138 watch_queue: fix pipe accounting mismatch
In the Linux kernel, the following vulnerability has been resolved: watchqueue: fix pipe accounting mismatch Currently, watchqueuesetsize modifies the pipe buffers charged to user-pipebufs without updating the pipe-nraccounted on the pipe itself, due to the if !pipehaswatchqueue test in...
CVE-2025-22060 net: mvpp2: Prevent parser TCAM memory corruption
In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached shadow SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly accessed by configuring an...
CVE-2025-39570
creationtimestamp| type| source ---|---|--- 2025-04-16 12:56:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12022 2025-04-16 14:49:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114348194618384395...
CVE-2025-27571
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to check the "Allow Users to View Archived Channels" configuration when fetching channel metadata of a post from archived channels, which allows authenticated users to access such information when a channel is archived...
CVE-2025-27565 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs...
CVE-2025-30737
...
CVE-2025-30740
...
CVE-2025-30732
...
CVE-2025-30726
CVE-2025-30726 affects Oracle E-Business Suite, Oracle Application Object Library (AOL) Core, in versions 12.2.3–12.2.14. An unauthenticated attacker with network access over HTTP can read a subset of AOL data. The vulnerability is documented with a CVSS v3.1 base score of 5.3 (Confidentiality). ...
CVE-2025-30724
...
CVE-2025-30708
Oracle E-Business Suite vulnerability CVE-2025-30708 affects Oracle User Management (component: Search and Register Users) in 12.2.4–12.2.14. Multiple sources in connected documents confirm an unauthenticated, network-accessible exposure via HTTP that can lead to unauthorized access to sensitive ...
CVE-2025-30710
...
CVE-2025-30705
...
CVE-2025-30707
...
CVE-2025-30697
CVE-2025-30697 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools (Panel Processor) versions 8.60–8.62. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise PeopleTools, with attacks requiring user interaction and potentially impacting additional...
CVE-2025-30689
...
CVE-2025-30686
Affected product: Oracle Hospitality Simphony (part of Oracle Food and Beverage Applications) with EMC component. Vulnerable versions: 19.1–19.7. Root cause: flaw in EMC within Simphony that enables a low-privilege, network-access user (HTTP) to access or alter data and cause partial DOS. Impact:...
CVE-2025-3522
Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validate...
