18415 matches found
EUVD-2025-206129
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
An Empirical Evaluation of LLM-Based Approaches for Code Vulnerability Detection: RAG, SFT, and Dual-Agent Systems
The rapid advancement of Large Language Models LLMs presents new opportunities for automated software vulnerability detection, a crucial task in securing modern codebases. This paper presents a comparative study on the effectiveness of LLM-based techniques for detecting software vulnerabilities...
DEBIAN-CVE-2025-15272
FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...
BELL-CVE-2023-54312
Bulletin has no description...
BELL-CVE-2023-54225
Bulletin has no description...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993135)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993135 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery wor...
CVE-2025-69210
creationtimestamp| type| source ---|---|--- 2025-12-30 22:32:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbafsip47o2y 2026-01-24 22:44:08+00:00| seen| https://gist.github.com/alon710/2bc831a1f1b0ddaa3266a9700f8e1112 2026-04-29 07:21:08+00:00| seen|...
CVE-2025-65411
creationtimestamp| type| source ---|---|--- 2025-12-30 22:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbaf7mkmkv2y 2026-01-02 21:53:17+00:00| seen| Telegram/JxPXMxRS9I7Z3kYw2DwOkNmPXjWNfhlFmYgdz0OY1MqXE...
CVE-2023-54260
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...
UBUNTU-CVE-2023-54280
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...
DEBIAN-CVE-2022-50852
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix use after free in mt7921acpiread Don't dereference "sarroot" after it has been freed...
CVE-2023-54280
CVE-2023-54280 affects the Linux kernel and concerns a race condition in CIFS when building IPC trees. The patch fixes a use-after-free in __tree_connect_dfs_target() by protecting access to TCP_Server_Info.hostname during IPC tree name construction and updating IPC tcon state on success to avoid...
CVE-2023-54260
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...
CVE-2025-53627
creationtimestamp| type| source ---|---|--- 2025-12-29 18:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5irhmoa32u...
CVE-2025-15182
creationtimestamp| type| source ---|---|--- 2025-12-29 12:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4sq7ubr72e...
CVE-2025-15065
creationtimestamp| type| source ---|---|--- 2025-12-29 01:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3q2nez3b2o...
CVE-2025-15154
creationtimestamp| type| source ---|---|--- 2025-12-29 00:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3lt75y4w2y...
Apache Common Text Library Code Execution
The vulnerability of the Apache Common Text library in FileMaker Server is related to improper code generation when using interpolation functions. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2025-15125 JeecgBoot queryDepartPermission improper authorization
A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument departId results in improper authorization. The attack can be launched remotely. This attack is...