CVE-2025-12840

A flaw was found in OpenEXR. This heap-based buffer overflow vulnerability occurs during EXR file parsing due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious EXR file. Successful...

UBUNTU-CVE-2025-68348

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in blkdevissuezeropages Move the fatal signal check before bioalloc to prevent a memory leak when BLKDEVZEROKILLABLE is set and a fatal signal is pending. Previously, the bio was allocated before checking f...

CVE-2025-68348

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in blkdevissuezeropages Move the fatal signal check before bioalloc to prevent a memory leak when BLKDEVZEROKILLABLE is set and a fatal signal is pending. Previously, the bio was allocated before checking f...

CVE-2023-53996

CVE-2023-53996 affects the Linux kernel's x86/SEV path where enc_dec_hypercall() incorrectly accepted a page count instead of a size, causing non-page-aligned vaddrs to be misclassified as decrypted during encryption status checks. This could lead to page corruption during live migration due to i...

CVE-2025-68348 block: fix memory leak in __blkdev_issue_zero_pages

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in blkdevissuezeropages Move the fatal signal check before bioalloc to prevent a memory leak when BLKDEVZEROKILLABLE is set and a fatal signal is pending. Previously, the bio was allocated before checking f...

CVE-2025-68348

CVE-2025-68348 : In the Linux kernel block layer, a memory leak in __blkdev_issue_zero_pages was fixed by moving the fatal signal check before bio_alloc(). If a fatal signal was pending and BLKDEV_ZERO_KILLABLE was set, the code could allocate a bio and then exit the loop without freeing it. The ...

PT-2025-53338

Name of the Vulnerable Software and Affected Versions Teradek VidiU Pro version 3.0.3 Description The Teradek VidiU Pro software contains a cross-site request forgery issue. This allows attackers to alter administrative passwords due to insufficient validation of requests. An attacker can create...

PT-2025-53324

V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to create admin users, enable SSH, or modify system settings by tricking authenticated...

PT-2025-53201

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all dirty pages during umount if cp error is set xfstest generic/361 reports a bug as below: f2fs bug onsbi, sbi-fsync node num; kernel BUG at fs/f2fs/super.c:1627! RIP: 0010:f2fs put super+0x3a8/0x3b0 Call Trac...

PT-2025-53321

Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to access administrative web pages by disabling JavaScript. Attackers can navigate to multiple administrative endpoints and to bypass client-side validation and access sensitive system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a dead loop and bug triggers that may result if cperror is set during umount and all dirty pages are not...

PT-2025-53340

Name of the Vulnerable Software and Affected Versions KYOCERA Net Admin version 3.4.0906 Description The software contains a cross-site request forgery condition that permits attackers to create administrative users without sufficient request validation. An attacker can construct malicious web...

Linux Distros Unpatched Vulnerability : CVE-2025-68348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: fix memory leak in blkdevissuezeropages Move the fatal signal check before bioalloc to prevent a memory leak when BLKDEVZEROKILLABLE is set and a fatal...

PT-2025-53070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ALSA PCM memory allocation helpers. A missing lock during a sanity check allows a user to potentially allocate more memory than the predefined maximum...

PT-2025-53092

Name of the Vulnerable Software and Affected Versions Kodezen LLC Academy LMS versions through 3.4.0 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Stored Cross-site Scripting XSS condition. This allows an attacker to...

PT-2025-53369

Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to change admin passwords, add new users, and modify system settings by tricking authenticated...

PT-2025-53228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the f2fs filesystem. When f2fs attempts to checkpoint during foreground garbage collection gc in Log-structured filesystem LFS mode, a system cras...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the parsing of NC variables. An attacker can execute arbitrary code in the context of the current user by enticing a user to open a specially crafted file or visit a malicious page that triggers an...

PYSEC-2025-211

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability ...

CVE-2021-47722

Zucchetti Axess CLOKI Access Control 1.64 contains a cross-site request forgery vulnerability that allows attackers to manipulate access control settings without user interaction. Attackers can craft malicious web pages with hidden forms to disable or modify access control parameters by tricking...