1700 matches found
PT-2025-36860
Name of the Vulnerable Software and Affected Versions: Local Security Authority Subsystem Service affected versions not specified Description: An elevation-of-privilege vulnerability allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer versi...
CVE-2025-40928
A flaw was found in the JSON-XS Perl module. A buffer overflow can be triggered due to an integer overflow when a specially crafted JSON input is processed, causing a segmentation fault, crashing the application using the module and resulting in a denial of service. Mitigation Mitigation for this...
CVE-2025-10096
creationtimestamp| type| source ---|---|--- 2025-09-08 19:47:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydxuhzxdy2d...
CVE-2025-57141
rsbi-os 4.7 is vulnerable to Remote Code Execution RCE in sqlite-jdbc...
BELL-CVE-2025-39730
Bulletin has no description...
BELL-CVE-2025-39732
Bulletin has no description...
CVE-2025-5993
creationtimestamp| type| source ---|---|--- 2025-09-08 12:55:18+00:00| seen| https://t.me/canyoupwnme/6946 2025-09-08 12:55:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydauq2m2x2r 2025-09-08 13:15:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydbyjpfui26...
CVE-2025-39729
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings: drivers/crypto/ccp/sev-dev.c:1312 sevplatforminitlocked error: we previously assumed 'error' could be null...
WordPress Laundry City Theme <= 1.2.16 is vulnerable to Local File Inclusion
Software Laundry City Type Theme Vulnerable versions = 1.2.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a4cd7e73d762 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immuni...
CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden
Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...
BELL-CVE-2025-39720
Bulletin has no description...
trivy-0.65.0-2.1 on GA media (moderate)
trivy-0.65.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15530-1 Rating: moderate Cross-References: CVE-2025-46569 CVSS scores: CVE-2025-46569 SUSE : 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L CVE-2025-46569 SUSE : 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N...
CVE-2025-39681
In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrlcpudetect in bspinit helper Since 923f3a2b48bd "x86/resctrl: Query LLC monitoring properties once during boot" resctrlcpudetect has been moved from common CPU initialization code to the...
CVE-2025-38737
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...
CVE-2025-39680
In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300i2csmbusxfer The data-block0 variable comes from user. Without proper check, the variable may be very large to cause an out-of-bounds bug. Fix this bug by checking the value of...
CVE-2025-39717
In the Linux kernel, the following vulnerability has been resolved: opentreeattr: do not allow id-mapping changes without OPENTREECLONE As described in commit 7a54947e727b 'Merge patch series "fs: allow changing idmappings"', opentreeattr2 was necessary in order to allow for a detached mount to b...
CVE-2025-39687
In the Linux kernel, the following vulnerability has been resolved: iio: light: as73211: Ensure buffer holes are zeroed Given that the buffer is copied to a kfifo that ultimately user space can read, ensure we zero it...
CVE-2025-39705
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability Why A null pointer dereference vulnerability exists in the AMD display driver's DC module cleanup function dcdestruct. When display control context dc-ctx construction...