20292 matches found
CVE-2025-21702
In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...
CVE-2025-26466
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to ...
CVE-2025-26465
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...
CVE-2025-1371
A flaw was found in GNU elfutils. This vulnerability allows a NULL pointer dereference via the handledynamicsymtab function in readelf.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ea...
CVE-2025-1372
A flaw was found in GNU elfutils. This vulnerability allows buffer overflow, potentially leading to arbitrary code execution or crashes via manipulation of the 'z/x' argument in the dumpdatasection/printstringsection function of readelf.c. Mitigation Mitigation for this issue is either not...
CVE-2025-1390
A flaw was found in libcap. This vulnerability allows local privilege escalation via incorrect parsing of group names in /etc/security/capability.conf, leading to unintended users being granted inherited capabilities. Mitigation Mitigation for this issue is either not available or the currently...
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250211 release bsc1237096 CVE-2024-31068: Improper Finite State Machines FSMs in Hardware Logic for some Intel Processors may allow privileged user to potentially enable denial of service via local...
CVE-2025-1376
A flaw was found in GNU elfutils. This vulnerability allows denial of service via manipulation of the function elfstrptr in /libelf/elfstrptr.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...
CVE-2025-1377
A flaw was found in GNU elfutils. This vulnerability allows denial of service via manipulation of the gelfgetsymshndx function in strip.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...
CVE-2025-1365
A flaw was found in GNU elfutils. This vulnerability allows a buffer overflow via manipulation of the argument D/a in the processsymtab function of readelf.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2025-1352
A flaw was found in GNU elfutils. This vulnerability allows memory corruption via manipulation of the w argument in the libdwthreadtail function within libdwalloc.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2025-1373
A flaw was found in FFmpeg. This vulnerability allows a null pointer dereference function in libavformat/mov.c, leading to potential crashes when processing maliciously crafted MOV files. Mitigation Mitigation for this issue is either not available or the currently available options do not meet t...
CVE-2025-0998
No description is available for this CVE. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability...
CVE-2025-0997
A flaw was found in the Navigation component of Google Chrome. This vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...
CVE-2025-0995
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High Mitigation Mitigation for this issue is either not available or the currently available options do not meet the R...
PT-2025-6743
Name of the Vulnerable Software and Affected Versions DAS U-Boot versions prior to 2025.01-RC1 Description A stack consumption issue occurs in the sqfs size function in DAS U-Boot through a crafted squashfs filesystem with deep symlink nesting. This issue affects the SquashFS symlink resolution...
CVE-2024-52577
A flaw was found in Apache Ignite. This vulnerability allows remote code execution via specially crafted Ignite messages that bypass Class Serialization Filters. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Securit...
Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security
WordPress CVE-2024-10924 Exploit 📌 Overview This repository...
CVE-2023-52291
In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and...