DEBIAN-CVE-2023-53719

In the Linux kernel, the following vulnerability has been resolved: serial: arcuart: fix ofiomap leak in arcserialprobe Smatch reports: drivers/tty/serial/arcuart.c:631 arcserialprobe warn: 'port-membase' from ofiomap not released on lines: 631. In arcserialprobe, if uartaddoneport fails,...

CVE-2025-11866

creationtimestamp| type| source ---|---|--- 2025-10-22 08:43:34+00:00| seen| Telegram/EX2LHB4HrGv-ZI8Q0F0bprYlpRim0c5v8ijnOC8FxHvGFg0...

SUSE CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...

Use of Hard-coded Cryptographic Key

Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key for encrypting sensitive configurations when NeuVector stores data. The static key can be used to retrieve configuration data. Remediation Upgrade github.com/neuvector/neuvector/controller/common to...

CVE-2025-62587

...

CVE-2025-62287

CVE-2025-62287 affects Oracle Life Sciences InForm (Web Server) in Oracle Health Sciences Applications, affected version 7.0.1.0. The vulnerability allows unauthenticated network access via HTTP to compromise InForm, with attacks requiring user interaction from a non-attacker. Impact may include ...

CVE-2025-61754

...

CVE-2025-53061

The CVE-2025-53061 entry concerns Oracle PeopleSoft’s PeopleTools (PIA Core Technology) with affected versions 8.60, 8.61 and 8.62. Documents consistently describe an easily exploitable vulnerability that allows a high-privilege attacker, over HTTP with network access, to perform unauthorized upd...

CVE-2025-53059

CVE-2025-53059 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools (OpenSearch Dashboards) with affected versions 8.60, 8.61, 8.62. The flaw enables a high-privileged attacker with network access via HTTP to compromise PeopleSoft PeopleTools and potentially obtain unauthorized access to ...

CVE-2025-53046

...

`tokio-tar` parses PAX extended headers incorrectly, allows file smuggling

The archive reader incorrectly handles PAX extended headers, when the ustar header incorrectly specifies zero size size=000000000000, while a PAX header specifies a non-zero size, tokio-tar::Archive is going to read the file content as tar entry header. This can be used by a tar file to present...

CVE-2025-7851

creationtimestamp| type| source ---|---|--- 2025-10-21 01:46:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3o7jd6gzz2o 2025-10-21 13:19:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115412353242186528 2025-10-23 11:33:46+00:00| seen|...

CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ea...

ALPINE-CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...

DEBIAN-CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...

CVE-2025-54764

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...

CVE-2018-25118

creationtimestamp| type| source ---|---|--- 2025-10-20 22:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nsw45at32o 2025-10-23 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb24xsxs2w 2025-11-15 00:00:00+00:00| seen| The Shadowserver...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the mbedtlsmpimodinv or mbedtlsmpigcd functions. An attacker can recover sensitive information from RSA operations by performing a local timing analysis. Note: Applications that do not use RSA private keys and do not...

CVE-2025-60514

Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0, <=4.0.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0, <=4.0.1) +32 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (>=4.0.0, <=4.0.1)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2025-57738https://vulners.com/cve/CVE-2025-577...