CVE-2022-49093

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...

CVE-2022-49094

In the Linux kernel, the following vulnerability has been resolved: net/tls: fix slab-out-of-bounds bug in decryptinternal The memory size of tlsctx-rx.iv for AES128-CCM is 12 setting in tlssetswoffload. The return value of cryptoaeadivsize for "ccmaes" is 16. So memcpy require 16 bytes from 12...

CVE-2022-49216

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix reference leak in tegradsigangedprobe The reference taken by 'offinddevicebynode' must be released when not needed anymore. Add putdevice call to fix this...

CVE-2022-49197

In the Linux kernel, the following vulnerability has been resolved: afnetlink: Fix shift out of bounds in group mask calculation When a netlink message is received, netlinkrecvmsg fills in the address of the sender. One of the fields is the 32-bit bitfield nlgroups, which carries the multicast...

CVE-2021-47654

In the Linux kernel, the following vulnerability has been resolved: samples/landlock: Fix pathlist memory leak Clang static analysis reports this error sandboxer.c:134:8: warning: Potential leak of memory pointed to by 'pathlist' ret = 0; ^ pathlist is allocated in parsepath but never freed...

CVE-2021-4453

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpumetricstable memory leak Memory is allocated for gpumetricstable in renoirinitsmctables, but not freed in int smuv120finismctables. Free it!...

CVE-2021-47650

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There is one call trace that sndsocregistercard -sndsocbindcard-socinitpcmruntime -sndsocdaicompressnew-sndsocnewcompress. In the trace the 'codecdai' transfers from...

CVE-2021-47652

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufxusbprobe I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:fbdestroymodelist+0x38/0x100 ... Call Trace:...

CVE-2025-27110

creationtimestamp| type| source ---|---|--- 2025-02-25 20:23:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5376 2025-02-25 23:14:25+00:00| seen| https://t.me/cvedetector/18923 2025-03-03 03:15:50+00:00| seen|...

CVE-2025-21626

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the status.php endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the status.p...

CERTFR-2025-ACT-008

creationtimestamp| type| source ---|---|--- 2025-02-24 14:29:43+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114059338188078617 2025-02-24 15:20:23+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3liwnkkioxa2g 2025-03-10 13:12:34+00:00| seen|...

CVE-2025-26304

A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...

CVE-2025-26309

A memory leak has been identified in the parseSWFDEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2024-21966

creationtimestamp| type| source ---|---|--- 2025-02-11 20:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzkmij62z 2025-02-14 02:50:19+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3li46xwqao22p 2025-02-14 15:20:41+00:00| seen|...

CVE-2025-21377

creationtimestamp| type| source ---|---|--- 2025-02-11 18:07:13+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113986583418117641 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:53+00:00| seen|...

CVE-2025-25064

creationtimestamp| type| source ---|---|--- 2025-02-03 19:23:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113941586596378393 2025-02-03 20:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhceddalcz2e 2025-02-03 21:59:56+00:00| seen|...

CVE-2024-12510

creationtimestamp| type| source ---|---|--- 2025-02-03 18:53:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113941466402330448 2025-02-03 19:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawtn3jz2t 2025-02-14 13:44:52+00:00| seen|...

CVE-2024-56161

creationtimestamp| type| source ---|---|--- 2025-02-03 18:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc5ld77ig2p 2025-02-03 20:19:12+00:00| seen| https://t.me/cvedetector/17082 2025-02-03 21:11:49+00:00| seen|...

CVE-2023-43795

creationtimestamp| type| source ---|---|--- 2025-01-31 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-31 2025-02-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-22 2025-03-08 00:00:00+00:00| exploited| The...

CVE-2024-7881

creationtimestamp| type| source ---|---|--- 2025-01-28 15:08:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113906608799064383 2025-01-28 15:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsqqgb2zd2n 2025-01-28 17:06:57+00:00| seen|...