CVE-2024-33607

CVE-2024-33607 describes an out-of-bounds read in some Intel® TDX module software prior to version 1.5.07.00.774, which may allow an authenticated user to disclose information via local access. Affected software is Intel® TDX module software before 1.5.07.00.774. The vulnerability has local attac...

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: uv, buck2, linkerd2, mdbook, efs-utils, zola, linkerd-extension-init, pixi, linkerd2-proxy, shadowsocks-rust...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: uv, buck2, linkerd2, mdbook, efs-utils, zola, linkerd-extension-init, pixi, linkerd2-proxy, shadowsocks-rust...

CVE-2025-55159 vulnerabilities

Vulnerabilities for packages: jujutsu, linkerd-extension-init, linkerd2-proxy, pixi, uv, zola, buck2, mdbook, linkerd2, efs-utils, shadowsocks-rust...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: jujutsu, linkerd-extension-init, linkerd2-proxy, pixi, uv, zola, buck2, mdbook, linkerd2, efs-utils, shadowsocks-rust...

openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0....

PT-2025-51579

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the IPv6 implementation related to Address Header AH output processing. Specifically, the ah6 output and ah6 output done functions exhibit...

Linux Distros Unpatched Vulnerability : CVE-2025-6926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki -...

BIT-LIBPHP-2025-1735 pgsql extension does not check for errors during escaping

In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid...

BIT-LIBPHP-2025-1219 libxml streams use wrong content-type header when requesting a redirected resource

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may...

BIT-LIBPHP-2022-31625 Freeing unallocated memory in php_pgsql_free_params()

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or...

BIT-LIBPHP-2021-21704 Multiple vulnerabilities in Firebird client extension

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...

BIT-LIBPHP-2021-21702 Null Dereference in SoapClient

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...

BIT-LIBPHP-2020-7059 OOB read in php_strip_tags_ex

When using fgetss function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash...

unbound: Unbound Cache poisoning

A cache poisoning flaw was found in Unbound. Resolvers supporting EDNS Client Subnet ECS must segregate outgoing queries to accommodate different outgoing ECS information. This issue reopens resolvers to a birthday paradox attack, known as the Rebirthday Attack, which attempts to match the DNS...

CVE-2025-8751

A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack...

Linux Distros Unpatched Vulnerability : CVE-2020-25827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluste...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2025-18922)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a cross-site scripting vulnerability that stems from an improperly implemented extension. An attacker can exploit the vulnerability to disclose cross-domain data using a constructed HTML page...

Linux Distros Unpatched Vulnerability : CVE-2023-29542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download...