55884 matches found
CVE-2025-38497
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty string to either 'qwsign' or 'landingPage' sysfs attributes, the store functions attempt to access pagel - 1 before validating that the length 'l' is...
CVE-2025-38492
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix race between cache write completion and ALLQUEUED being set When netfslib is issuing subrequests, the subrequests start processing immediately and may complete before we reach the end of the issuing function. At the en...
CVE-2025-38477 net/sched: sch_qfq: Fix race condition on qfq_aggregate
In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is modified in qfqchangeagg called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a...
CGA-9PHC-5C6Q-96M2
Bulletin has no description...
MINI-R8V4-V3VW-MM6C
Bulletin has no description...
MINI-GCP7-FQG6-FP84
Bulletin has no description...
CVE-2025-27800
CVE-2025-27800 corresponds to multiple stored XSS flaws in Optimizely Episerver CMS (EPiServer.CMS.Core/UI) affecting 11.x (<11.21.4 core and <11.37.5 UI) and 12.x (<12.22.1 core and
CVE-2025-54452
creationtimestamp| type| source ---|---|--- 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-668/...
PT-2025-31151 · Unknown · Polkadot Frontier
Name of the Vulnerable Software and Affected Versions: Polkadot Frontier versions prior to commit 36f70d1 Description: Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The Curve25519Add and Curve25519ScalarMul precompiles incorrectly handle invalid Ristrett...
Xorux XorMon-NG Web Application Privilege Escalation to Administrator
Vulnerability Details Affected Vendor: Xorux Affected Product: XorMon-NG Affected Version: 1.8 and prior Platform: Debian CWE Classification: CWE-648: Incorrect Use of Privileged APIs CVE ID: CVE-2025-54765 2. Vulnerability Description An API endpoint that should be limited to web application...
ALSA-2025:11861 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 kernel: RDMA/mlx5: Fix pagesize variable overflow...
PHPGurukul Small CRM security vulnerability
Small CRM is a customer relationship management system. Small CRM suffers from a session hijacking vulnerability that stems from the /crm/change-password.php component not terminating a session properly. No details of the vulnerability are available at this time...
Adobe ColdFusion 2023.6 - Remote File Read
Exploit Title: Adobe ColdFusion 2023.6 - Remote File Read Exploit Author: @İbrahimsql Exploit Author's github: https://github.com/ibrahmsql Description: ColdFusion 2023 LUcee - Remote Code Execution CVE: CVE-2024-20767 Vendor Homepage: https://www.adobe.com/ Requirements: requests=2.25.0,...
MINI-8WXJ-MQCP-WHXM
Bulletin has no description...
CVE-2023-21391
creationtimestamp| type| source ---|---|--- 2025-07-27 09:04:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luwpu2m3xew2...
CVE-1999-1467
creationtimestamp| type| source ---|---|--- 2025-07-26 20:42:56+00:00| seen| https://gist.github.com/DEEPML1818/fef33d765177026df668a4476d4fe698 2025-07-26 20:48:36+00:00| seen| https://gist.github.com/DEEPML1818/8672f137125674c3936651ee63417e61 2026-02-17 07:22:13+00:00| seen|...
BELL-CVE-2025-38393
Bulletin has no description...
BELL-CVE-2025-38465
Bulletin has no description...
