SUSE: Security Advisory (SUSE-SU-2025:4423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-64188

Incorrect Privilege Assignment vulnerability in PenciDesign Soledad soledad allows Privilege Escalation.This issue affects Soledad: from n/a through = 8.6.9...

CVE-2025-60180 WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.5.1...

CLSA-2025-1765985737 libssh: Fix of 2 CVEs

CVE-2025-5351: fix double-free conditions - CVE-2025-8114: fix NULL pointer dereference...

BELL-CVE-2025-68318

Bulletin has no description...

BELL-CVE-2025-68183

Bulletin has no description...

CVE-2021-25082

creationtimestamp| type| source ---|---|--- 2025-12-17 02:07:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25082.yaml 2025-12-18 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mac36lkbax2f...

Fedora: Security Advisory (FEDORA-2025-0e41e63705)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-68283

A flaw was found in the libceph module of the Linux kernel. OSD index values received from network packets were not properly validated against map-maxosd before use, with only a BUGON assertion as protection. A malicious or compromised Ceph cluster could send out-of-bounds OSD indexes, potentiall...

DEBIAN-CVE-2025-68259

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced When re-injecting a soft interrupt from an INT3, INT0, or select INTn instruction, discard the exception and retry the instruction if the code stream is changed...

DEBIAN-CVE-2025-68264

In the Linux kernel, the following vulnerability has been resolved: ext4: refresh inline data size before write operations The cached ei-iinlinesize can become stale between the initial size check and when ext4updateinlinedata/ext4createinlinedata use it. Although ext4getmaxinlinesize reads the...

DEBIAN-CVE-2025-68230

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough On PF passthrough environment, after hibernate and then resume, coralgemm will cause gpu page fault. Mode1 reset happens during hibernate, but partition mode is n...

DEBIAN-CVE-2025-68184

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 "drm/mediatek: Add AFBC support to Mediatek DRM driver" added AFBC support to Mediatek DRM and enabled the 32x8/split/sparse modifier. However, this is...

CVE-2025-63757

creationtimestamp| type| source ---|---|--- 2025-12-12 16:50:15+00:00| seen| https://gist.github.com/miora-sora/43c1c5616dd5b4f960a9d20296ef4833...

CVE-2025-67687

creationtimestamp| type| source ---|---|--- 2025-12-11 07:19:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ozurcnce2x...

BELL-CVE-2023-53790

Bulletin has no description...

BELL-CVE-2023-53854

Bulletin has no description...

CVE-2023-53832

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10syncrequest initresync inits mempool and sets conf-havereplacemnt at the beginning of sync, closesync frees the mempool when sync is completed. After 1 recovery might be skipped and initresy...

KB5074204: Security Update for Windows PowerShell (OS Builds 26100.7392 and 26200.7392)

None None...

PT-2025-49816

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An attacker can utilize an undocumented UART Universal Asynchronous Receiver-Transmitter, a hardware communication protocol port on the PCB as a side-channel to...