CVE-2025-0395

creationtimestamp| type| source ---|---|--- 2025-01-22 13:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdh7aw6jy2f 2025-01-22 13:49:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgdj3wz7dp2e 2025-01-22 13:49:56+00:00| seen|...

CVE-2025-20617

creationtimestamp| type| source ---|---|--- 2025-01-22 06:03:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2518 2025-01-22 06:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcpqu3ijh2h 2025-01-22 06:44:20+00:00| seen|...

SUSE CVE-2024-57936

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causin...

DEBIAN-CVE-2024-57936

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causin...

CVE-2024-52973

creationtimestamp| type| source ---|---|--- 2025-01-21 11:11:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113866040068105795 2025-01-21 11:15:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113866055428187297 2025-01-21 11:15:42+00:00| seen|...

CVE-2024-52973 Kibana allocation of resources without limits or throttling leads to crash

An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/logentries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana...

Kibana 7.17.23 and 8.14.2 Security Update (ESA-2024-26)

Kibana allocation of resources without limits or throttling leads to crash ESA-2024-26 An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/logentries/summary. This can be carried out by users with read access to the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect setting of the maximum number of SGEs for work requests in the RDMA/bnxtre module. This could...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the exfat module falling into an infinite loop when directory entries are not updated correctly. This could...

PT-2025-2949 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana affected versions not specified Description: An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to "/api/log entries/summary". This can be carried out by users wi...

Hashicorp Go-slug 后置链接漏洞

HashiCorp Hashicorp Go-slug is a Go-based codebase for packing and unpacking files from HashiCorp, USA. A security vulnerability exists in Hashicorp Go-slug version 0.16.2 and earlier, which stems from the fact that HashiCorp's go-slug library is susceptible to a zip-slip style attack when...

SUSE CVE-2025-21642

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: sched: avoid using current-nsproxy Using the 'net' structure via 'current' is not recommended for different reasons. First, if the goal is to use it to read or write per-netns data, this is inconsistent with how th...

CVE-2025-0557

creationtimestamp| type| source ---|---|--- 2025-01-18 09:01:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113848542311812349 2025-01-18 09:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyxvyd7v22c 2025-01-18 09:39:23+00:00| seen|...

GHSA-C9P4-XWR9-RFHX Zot IdP group membership revocation ignored

Summary The group data stored for users in the boltdb database meta.db is an append-list so group revocations/removals are ignored in the API. Details SetUserGroups is alled on login, but instead of replacing the group memberships, they are appended. This may be due to some conflict with the grou...

CVE-2025-23483

creationtimestamp| type| source ---|---|--- 2025-01-16 20:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3xfvh7i2n 2025-01-16 21:23:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113840133851671374...

CVE-2025-21298

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpujafeko2t 2025-01-14 18:48:55+00:00| seen|...

CVE-2024-57637

creationtimestamp| type| source ---|---|--- 2025-01-14 01:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cecrf32s 2025-01-14 01:46:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113824182403127754...

RHSA-2024:8260

creationtimestamp| type| source ---|---|--- 2025-01-13 21:12:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1393 2025-02-25 08:25:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5260...

CVE-2024-57838

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...

DEBIAN-CVE-2024-57838

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...