1820 matches found
CVE-2025-59030: Incorrect Default Permissions
An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...
PowerDNS Recursor security vulnerability
PowerDNS Recursor pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security vulnerability exists in PowerDNS Recursor that stems from a TCP NOTIFY query that could result in the deletion of cache records...
CVE-2025-22432
In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22432
In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation...
EUVD-2025-201582
In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...
DEBIAN-CVE-2025-40273
In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...
CVE-2025-40237
In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfsencodefid with sumount Calling intotifyshowfdinfo on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race...
CVE-2025-40237: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfsencodefid with sumount Calling intotifyshowfdinfo on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race...
OPENSUSE-SU-2025:20099-1 Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation bsc1251958. - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal bsc1251959. - CVE-2025-62231: Fixed value overflow in Xkb extension XkbSetCompatMap...
SUSE-SU-2025:21149-1 Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation bsc1251958. - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal bsc1251959. - CVE-2025-62231: Fixed value overflow in Xkb extension XkbSetCompatMap...
CLSA-2025-1764081820 xorg-x11-server-Xwayland: Fix of 3 CVEs
CVE-2025-62229: fix use-after-free caused by incorrect error cleanup in present notify handling - CVE-2025-62230: fix use-after-free caused by improper XKB resource cleanup - CVE-2025-62231: fix overflow caused by improper bounds checking in XkbSetCompatMap...
DEBIAN-CVE-2025-40211
In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpivideoswitchbrightness The switchbrightnesswork delayed work accesses device-brightness and device-backlight, freed by acpivideodevunregisterbacklight during device removal. If the work...
CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpivideoswitchbrightness The switchbrightnesswork delayed work accesses device-brightness and device-backlight, freed by acpivideodevunregisterbacklight during device removal. If the work...
CVE-2025-40211 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpivideoswitchbrightness The switchbrightnesswork delayed work accesses device-brightness and device-backlight, freed by acpivideodevunregisterbacklight during device removal. If the work...
Linux I2C Driver Buffer Overflow DoS
The vulnerability of the i2cacpinotify function in the drivers/i2c/i2c-core-acpi.c module of the Linux I2C driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
Malicious code in notify-simple-theta-monitor-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b423312ee55eae4b343bff813661d5a36f603668689ee6635047c8f5c07cf34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189993 Malicious code in tree-notify-fire-resolve-scale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58286446bdb6c6f5f5005a6bc809b0344a781e5d24164ab1e56e1fe30e434940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188349 Malicious code in notify-string-deploy-file-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261bf5701f54f586ce80f4a7f1529d9420634df6bbed2f132ab18fb20a29fa54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185779 Malicious code in beta-enum-notify-view-stack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bccf3f703fef5887b6554bcd18352453f796633476d23cc246ea564274a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...