CVE-2024-11218

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

CVE-2023-37035

creationtimestamp| type| source ---|---|--- 2025-01-21 23:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbybixqn42f...

CVE-2025-21554

...

CVE-2025-21551

CVE-2025-21551 is a vulnerability in Oracle Solaris 11 affecting the File system component. It enables a locally authenticated, high-privilege attacker to compromise Solaris, potentially leading to unauthorized data creation/deletion/modification and a complete denial of service (hangs/crashes). ...

CVE-2025-21547

...

CVE-2025-21543

...

CVE-2025-21541

...

CVE-2025-21532

...

CVE-2025-21518

CVE-2025-21518 affects Oracle MySQL Server, specifically the Server: Optimizer component (also listed with related Oracle MySQL Server entries). Affected versions are 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The vulnerability is exploitable by a low-privilege, network-accessing att...

CVE-2025-21516

...

CVE-2025-21513

The CVE-2025-21513 issue affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to 9.2.9.0. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools, requiring user interaction for exploitation. Impacts include unauthorized update/inser...

CVE-2025-21512

...

CVE-2025-21508

...

CVE-2025-21505

...

CVE-2025-21499

...

CVE-2025-21500

...

CVE-2025-24457

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs...

CVE-2025-21663

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" SID to be written to the MGBEWRAPAXIASID0CTRL register. The current driver is hard coded to use MGBE0's...

GHSA-X5MQ-JJR3-VMX6

creationtimestamp| type| source ---|---|--- 2025-01-20 16:01:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113861519101056622 2025-01-21 15:00:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2408...

CVE-2024-57904

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call inputfreedevice on allocated iiodev Current implementation of at91tsregister calls inputfreedeivce on st-tsinput, however, the err label can be reached before the allocated iiodev is stored to st-tsinput. Thu...