DEBIAN-CVE-2025-40094

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

DEBIAN-CVE-2025-62230

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

DEBIAN-CVE-2025-58187

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...

Attack Surface Exposures: A Practical Guide

Many security teams believe their existing tools have them fully covered. With a firewall, endpoint protection, and a vulnerability scanner, it’s easy to assume you can see everything that matters. This is one of the most dangerous myths in cybersecurity today. These tools often operate in silos,...

BELL-CVE-2025-40052

Bulletin has no description...

BELL-CVE-2025-40029

Bulletin has no description...

CVE-2025-40050

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPFNEG if dst is a pointer In checkaluop, the verifier currently calls checkregarg and adjustscalarminmaxvals unconditionally for BPFNEG operations. However, if the destination register holds a...

Fedora: Security Advisory (FEDORA-2025-cf4f628312)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-55752

creationtimestamp| type| source ---|---|--- 2025-10-27 17:51:36+00:00| seen| https://seclists.org/oss-sec/2025/q4/75 2025-10-27 19:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m474q3zn6m23 2025-10-27 19:28:14+00:00| seen|...

CVE-2025-12210

creationtimestamp| type| source ---|---|--- 2025-10-27 04:31:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45lkfr2io2o...

K000157114: cPython vulnerability CVE-2025-4517

Security Advisory Description Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter...

SUSE-SU-2025:20872-1 Security update for haproxy

This update for haproxy fixes the following issues: - CVE-2025-11230: Fixed mjson JSON decoder excessive resource consumption bsc1250983...

CVE-2025-10705

creationtimestamp| type| source ---|---|--- 2025-10-23 14:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3umda5j2n2u...

CVE-2025-60341

creationtimestamp| type| source ---|---|--- 2025-10-22 17:51:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115419084710628503 2025-10-22 21:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3sr2vqqlb2c...

DEBIAN-CVE-2023-53719

In the Linux kernel, the following vulnerability has been resolved: serial: arcuart: fix ofiomap leak in arcserialprobe Smatch reports: drivers/tty/serial/arcuart.c:631 arcserialprobe warn: 'port-membase' from ofiomap not released on lines: 631. In arcserialprobe, if uartaddoneport fails,...

CVE-2025-62587

...

CVE-2025-62287

CVE-2025-62287 affects Oracle Life Sciences InForm (Web Server) in Oracle Health Sciences Applications, affected version 7.0.1.0. The vulnerability allows unauthenticated network access via HTTP to compromise InForm, with attacks requiring user interaction from a non-attacker. Impact may include ...

CVE-2025-61754

...

CVE-2025-53061

The CVE-2025-53061 entry concerns Oracle PeopleSoft’s PeopleTools (PIA Core Technology) with affected versions 8.60, 8.61 and 8.62. Documents consistently describe an easily exploitable vulnerability that allows a high-privilege attacker, over HTTP with network access, to perform unauthorized upd...

CVE-2018-25118

creationtimestamp| type| source ---|---|--- 2025-10-20 22:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nsw45at32o 2025-10-23 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb24xsxs2w 2025-11-15 00:00:00+00:00| seen| The Shadowserver...