CVE-2024-43046

There may be information disclosure during memory re-allocation in TZ Secure OS...

CVE-2024-43046 Information Exposure in TZ Secure OS

There may be information disclosure during memory re-allocation in TZ Secure OS...

CVE-2024-43046 Information Exposure in TZ Secure OS

There may be information disclosure during memory re-allocation in TZ Secure OS...

CVE-2024-43046

CVE-2024-43046 describes an information disclosure vulnerability affecting TZ Secure OS on Qualcomm chipsets, triggered by memory re-allocation where sensitive memory content may be exposed. The CVE notes a memory re-allocation issue but the provided documents do not specify affected product vers...

CVE-2025-32359

In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor authentication configuration, users need to re-authenticate with their current password first. However, this change was enforced in Zammad only on the front end level, and not wh...

PT-2025-15187

Name of the Vulnerable Software and Affected Versions TZ Secure OS affected versions not specified Description The issue concerns information disclosure during memory re-allocation. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2024-43046: Exposure of Sensitive Information to an Unauthorized Actor

There may be information disclosure during memory re-allocation in TZ Secure OS...

CVE-2025-32359

In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor authentication configuration, users need to re-authenticate with their current password first. However, this change was enforced in Zammad only on the front end level, and not wh...

CVE-2025-29928 authentik's deletion of sessions did not revoke sessions when using database session storage

authentik is an open-source identity provider. Prior to versions 2024.12.4 and 2025.2.3, when authentik was configured to use the database for session storage which is a non-default setting, deleting sessions via the Web Interface or the API would not revoke the session and the session holder wou...

CVE-2025-29928

CVE-2025-29928 concerns authentik, an open-source identity provider. When configured to use database-based session storage (not default), deleting sessions via the Web Interface or API would not revoke those sessions, allowing session holders continued access. This affects authentik versions prio...

AZL-62687 CVE-2025-21885 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix the page details for the srq created by kernel consumers While using nvme target with usesrq on, below kernel panic is noticed. 549.698111 bnxten 0000:41:00.0 enp65s0np0: FEC autoneg off encoding: Clause 91...

SUSE CVE-2025-2588

A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function recaseexpand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been...

CVE-2024-12391

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

AZL-58951 CVE-2025-2588 affecting package augeas for versions less than 1.12.0-6

A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function recaseexpand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been...

CVE-2024-12391 Regular Expression Denial of Service (ReDoS) in binary-husky/gpt_academic

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

CVE-2024-12391

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

CVE-2024-12391: Inefficient Regular Expression Complexity

A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...

Vulnerability of the atomisp_alloc_css_stat_bufs() function in the drivers/staging/media/atomisp/pci/atomisp_ioctl.c module – This driver for Intel Atom-core devices in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the atomispalloccssstatbufs function in the drivers/staging/media/atomisp/pci/atomispioctl.c module – The driver for Intel Atom-based devices in the Linux operating system is vulnerable to a vulnerability where memory previously released is re-released. Exploiting this...

UBUNTU-CVE-2025-21806

In the Linux kernel, the following vulnerability has been resolved: net: let net.core.devweight always be non-zero The following problem was encountered during stability test: NULL netdevice: NAPI poll function processbacklog+0x0/0x530 \ returned 1, exceeding its budget of 0. ------------ cut her...

PT-2025-13222

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the RDMA/bnxt re module. The issue occurs when using nvme target with use srq on, resulting in a kernel panic due to a...