BELL-CVE-2023-53510

Bulletin has no description...

BELL-CVE-2023-53470

Bulletin has no description...

CVE-2025-59682

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common...

DEBIAN-CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

CVE-2023-53476

In the Linux kernel, the following vulnerability has been resolved: iwcxgb4: Fix potential NULL dereference in c4iwfillrescmidentry This condition needs to match the previous "if epcp-state == LISTEN " exactly to avoid a NULL dereference of either "listenep" or "ep". The problem is that "epcp" ha...

CVE-2025-59685

creationtimestamp| type| source ---|---|--- 2025-10-01 15:06:15+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3m25cuuhp2c2z...

DEBIAN-CVE-2023-53515

In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vmdev vmdev has a separate lifecycle because it has a 'struct device' embedded. Thus, having a release callback for it is correct. Allocating the vmdev struct with devres totally breaks this...

DEBIAN-CVE-2023-53513

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbdioctl arg without verification. The UBSAN warning calltrace like below: UBSAN: Undefined behaviour in fs/buffer.c:1709:35 signed integer...

DEBIAN-CVE-2023-53480

In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset-kobj.ktype in ksetregister When I register a kset in the following way: static struct kset mykset; kobjectsetname&mykset.kobj, "mykset"; ret = ksetregister&mykset; A null pointer dereference...

DEBIAN-CVE-2023-53456

In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that qla4xxx parses nlattrs: - qla4xxxsetchapentry - qla4xxxifacesetparam - qla4xxxsysfsddbsetparam and each of them directly converts the nlattr to...

CVE-2023-53501

In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommuv2: Fix pasidstate refcount dec hit 0 warning on pasid unbind When unbinding pasid - a race condition exists vs outstanding page faults. To prevent this, the pasidstate object contains a refcount. set to 1 on pasid...

CVE-2025-39925

In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEVUNREGISTER notification handler syzbot is reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 problem, for j1939 protocol did not have NETDEVUNREGISTER notification handler...

BELL-CVE-2025-9232

Bulletin has no description...

ipa security update

4.12.2-14.0.1.5 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-14.5 - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA 4.12.2-14.4 - Resolves: RHEL-1100...

ComicCon

Scans websites for SQL injection vulnerabilities usin...

CVE-2023-5984

creationtimestamp| type| source ---|---|--- 2025-09-30 14:59:47+00:00| seen| Telegram/4Wg1lqW1kDLln9sNwZjqhYKtmOlDkiPf70YINR2CHYk5o...

NewStart CGSL MAIN 6.06 : cups Multiple Vulnerabilities (NS-SA-2025-0218)

The remote NewStart CGSL host, running version MAIN 6.06, has cups packages installed that are affected by multiple vulnerabilities: - ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to...

CVE-2025-57874

creationtimestamp| type| source ---|---|--- 2025-09-29 18:58:39+00:00| seen| Telegram/uDB0hyBSK2evk5Zo03dtoPTpqeBWhcqqv3G9evqNKjHKZAs...

org.openmicroscopy:metakit (>=5.3.3, <=5.4.0), org.openmicroscopy:ome-codecs (>=0.3.1, <=1.2.0) +3 more potentially affected by CVE-2025-59952 via io.minio:minio (5.0.2)

io.minio:minio MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.minio:minio and may be impacted: - org.openmicroscopy:metakit =5.3.3, =0.3.1, =6.0.0-m2, =5.3.4, =6.0.1, =6.6.0 Source cves: CVE-2025-59952 Source advisory:...

CVE-2025-11138 mirweiye wenkucms common.php createPathOne os command injection

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...