CVE-2025-22421

In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2025-22421

A logic error in the contentDescForNotification function of NotificationContentDescription.kt within the Framework component of Google Android can lead to a notification content leak through the lockscreen. This vulnerability allows for local information disclosure without requiring additional ex...

CVE-2025-22421

In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

kernel: sch_hfsc: make hfsc_qlen_notify() idempotent

In the Linux kernel, the following vulnerability has been resolved: schhfsc: make hfscqlennotify idempotent hfscqlennotify is not idempotent either and not friendly to its callers, like fqcodeldequeue. Let's make it idempotent to ease qdisctreereducebacklog callers' life: 1. updatevf decreases...

PT-2025-35625

Name of the Vulnerable Software and Affected Versions: versions prior to 2025-22421 Description: A logic error in the code within contentDescForNotification of NotificationContentDescription.kt may lead to local information disclosure through the lockscreen. User interaction is not required for...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android, which stems from a logic error in the contentDescForNotification function in NotificationContentDescription.kt, which could lead to the disclosur...

Linux Distros Unpatched Vulnerability : CVE-2025-38638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6rtnotify inet6rtnotify can be called under RCU protection onl...

PT-2025-35628

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code within NotificationAccessConfirmationActivity.java may allow granting notification access above the lock screen. This could lead to local escalation of privilege,...

RHEL 9 : kernel-rt (RHSA-2025:14691)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14691 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the TemplateNotificationMessageGenerator. An attacker can gain unauthorized access to restricted information from expandoTableLocalService by sending crafted requests to the affected service. Remediation Upgrad...

MAL-2025-42046 Malicious code in notification-layer (npm)

The package notification-layer was found to contain malicious code...

Malicious code in notification-displayer (npm)

The package notification-displayer was found to contain malicious code...

Malicious code in notification-layer (npm)

The package notification-layer was found to contain malicious code...

MAL-2025-42045 Malicious code in notification-displayer (npm)

The package notification-displayer was found to contain malicious code...

kernel: sch_hfsc: make hfsc_qlen_notify() idempotent

In the Linux kernel, the following vulnerability has been resolved: schhfsc: make hfscqlennotify idempotent hfscqlennotify is not idempotent either and not friendly to its callers, like fqcodeldequeue. Let's make it idempotent to ease qdisctreereducebacklog callers' life: 1. updatevf decreases...

Linux Distros Unpatched Vulnerability : CVE-2019-6781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It w...

Linux Distros Unpatched Vulnerability : CVE-2021-39908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before...

Linux Distros Unpatched Vulnerability : CVE-2019-20394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-free is present in libyang before v1.0-r3 in the function yyparse when a type statement in used in a notification statement. Applications that use...

Fedora: Security Advisory (FEDORA-2025-5869edf3de)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

📄 GeoVision ASManager Windows Application 6.1.2.0 Remote Code Execution

GeoVision ASManager Windows Application version 6.1.2.0 suffers from a remote code execution vulnerability. Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution RCE Date: 19-MAR-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage:...