CVE-2022-49314 tty: Fix a possible resource leak in icom_probe

In the Linux kernel, the following vulnerability has been resolved: tty: Fix a possible resource leak in icomprobe When pcireadconfigdword failed, call pcireleaseregions and pcidisabledevice to recycle the resource previously allocated...

CVE-2022-49262 crypto: octeontx2 - remove CONFIG_DM_CRYPT check

In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 - remove CONFIGDMCRYPT check No issues were found while using the driver with dm-crypt enabled. So CONFIGDMCRYPT check in the driver can be removed. This also fixes the NULL pointer dereference in driver release...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a CONFIGDMCRYPT check in the octeontx2 driver that causes a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the icomprobe function that can lead to resource consumption when pcireadconfigdword fails...

Tenable Identity Exposure 安全漏洞

Tenable Identity Exposure is a fast, agentless solution from Tenable, Inc. It can detect and block attacks, eliminate attack paths, and provide risk-based guidance on vulnerability management and remediation. A security vulnerability exists in Tenable Identity Exposure versions prior to 3.77.9,...

Moodle allows teachers to evade trusttext config when restoring glossary entries

Additional checks were required to ensure trusttext is applied when enabled to glossary entries being restored...

GHSA-CW24-F6FQ-7J9V Moodle allows teachers to evade trusttext config when restoring glossary entries

Additional checks were required to ensure trusttext is applied when enabled to glossary entries being restored...

CVE-2025-26532 Teachers can evade trusttext config when restoring glossary entries

Additional checks were required to ensure trusttext is applied when enabled to glossary entries being restored...

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

...

CVE-2025-27100

lakeFS is an open-source tool that transforms your object storage into a Git-like repository. In affected versions an authenticated user can crash lakeFS by exhausting server memory. This is an authenticated denial-of-service issue. This problem has been patched in version 1.50.0. Users on versio...

CVE-2024-51505

An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role Config Admin could leverage a race condition to escalate privileges...

PT-2025-20492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue has been resolved in the Linux kernel. The problem occurs when malloc returns NULL due to low memory, causing the config pointer to be NULL. A check has been add...

GHSA-Q4XQ-445G-G6CH vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, keycloak...

CVE-2024-51505

An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role Config Admin could leverage a race condition to escalate privileges...

CVE-2024-4028 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, keycloak...

CVE-2024-39328

Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role Config Admin could exceed their configuration privileges in a multi-partition environment and access some confidential data. Data integrity and availability is not at risk...

CVE-2024-39328

Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role Config Admin could exceed their configuration privileges in a multi-partition environment and access some confidential data. Data integrity and availability is not at risk...

The vulnerability of the Linux operating system’s Bluetooth kernel component, which allows a hacker to gain elevated privileges within the system

The vulnerability of the Linux operating system’s Bluetooth kernel component is related to the use of memory after it is freed in the l2capconfigreq function. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

PT-2025-7214 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.14 Description: A Path Traversal vulnerability was discovered in the WeGIA application, affecting the examples.php endpoint. This issue could allow an attacker to gain unauthorized access to sensitive information...

CVE-2024-51505

An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role Config Admin could leverage a race condition to escalate privileges...