CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CGA-9WHM-XHWQ-HV3G

Bulletin has no description...

CVE-2025-2111

CVE-2025-2111 concerns the WordPress plugin Insert Headers And Footers (versions up to 3.1.1). The root cause is missing/incorrect nonce validation in the function custom_plugin_set_option , enabling Cross-Site Request Forgery (CSRF). By forged requests, unauthenticated attackers could update arb...

CVE-2025-30691

creationtimestamp| type| source ---|---|--- 2025-04-19 00:59:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12552 2025-05-10 17:41:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lotiff2hm22y 2025-05-11 02:21:13+00:00| seen|...

CVE-2025-29512

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12527 2025-04-18 20:33:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfhs3v2y 2025-04-18 20:45:32+00:00| seen|...

CVE-2025-24914

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12523 2025-04-18 19:42:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dtq37a5i2 2025-04-18 19:56:20+00:00| seen|...

CVE-2025-28355

creationtimestamp| type| source ---|---|--- 2025-04-18 17:00:10+00:00| published-proof-of-concept| Telegram/025r9Ac4mA6AzmYH4V5jxzygPRuLIkjd6NMrYR-gf6fiv4 2025-04-18 18:58:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12522 2025-04-18 19:35:23+00:00| seen|...

GHSA-MG2H-6X62-WPWC

creationtimestamp| type| source ---|---|--- 2025-04-18 16:59:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12494 2025-04-18 17:10:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360071872639571 2025-04-18 19:30:43+00:00| published-proof-of-concept|...

CVE-2024-11421

creationtimestamp| type| source ---|---|--- 2025-04-18 16:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fpdyix2c...

CVE-2025-37838

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fix use after free vulnerability in ssiprotocol Driver Due to Race Condition In the ssiprotocolprobe function, &ssi-work is bound with ssipxmitwork, In ssippnsetup, the ssippnxmit function within the ssippnops...

CVE-2025-39735

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...

CVE-2025-3791

CVE-2025-3791 affects symisc UnQLite, specifically the jx9MemObjStore function in /data/src/benchmarks/unqlite/unqlite.c. Reports describe a heap-based buffer overflow that enables a local attacker to trigger exploitation on the host. The vulnerability is confirmed across multiple feeds and linke...

CVE-2025-37838

CVE-2025-37838 affects the Linux kernel HSI ssi_protocol: a use-after-free can occur due to a race between ssi_protocol_probe() binding ssi->work to ssip_xmit_work() and ssi_protocol_remove() freeing ssi via kfree(ssi) while the work is still potentially in use. The connected Azure Linux 3.0 a...

CVE-2025-39930

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...

CVE-2025-38479

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remove path Add fsledma-txirq/errirq check to avoid below warning because no errirq at i.MX9 platform. Otherwise there will be kernel dump: WARNING: CPU: 0 PID: 11 at...

CVE-2025-39755 staging: gpib: Fix cb7210 pcmcia Oops

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmciadriver struct was still only using the old .name initialization in the drv field. This led to a NULL pointer deref Oops in strcmp called from pcmciaregisterdriver. Initialize the...

CVE-2025-39755

CVE-2025-39755 affects the Linux kernel (staging: gpib) where the pcmcia_driver struct used the old .name initialization in the drv field, causing a NULL pointer dereference in strcmp during pcmcia_register_driver. The fix is to initialize the pcmcia_driver struct name field. Impact is a local at...

BELL-CVE-2025-22104

Bulletin has no description...

CVE-2025-22037

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in allocpreauthhash The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn-preauthinfo is not...

CVE-2025-22085

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-free with the following call trace: ================================================================== BUG: KASAN: slab-use-after-free in...