8755 matches found
CLSA-2025-1746187509 expat: Fix of CVE-2024-8176
CVE-2024-8176: fix stack overflow vulnerability when parsing deeply nested entity references...
CLSA-2025-1746187414 expat: Fix of CVE-2024-8176
CVE-2024-8176: fix stack overflow vulnerability when parsing deeply nested entity references...
WordPress plugin Homey 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the uaudio driver not handling user space references correctly, which could lead to a deadlock...
MozillaThunderbird-128.10.0-1.1 on GA media (moderate)
MozillaThunderbird-128.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15042-1 Rating: moderate Cross-References: CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093 CVSS scores: CVE-2025-2817 SUSE : 7.8...
CVE-2022-49914 btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolveindirectrefs During backref walking, at resolveindirectrefs, if we get an error we jump to the 'out' label and call ulistfree on the 'parents' ulist, which frees all the...
CVE-2022-49914 btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolveindirectrefs During backref walking, at resolveindirectrefs, if we get an error we jump to the 'out' label and call ulistfree on the 'parents' ulist, which frees all the...
WordPress WordPress Simple PayPal Shopping Cart plugin <= 5.1.3 - Insecure Direct Object Reference vulnerability
Insecure Direct Object Reference vulnerability discovered by Jack Taylor in WordPress Plugin Simple Shopping Cart versions = 5.1.3...
PT-2025-18610 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, specifically in the cxl/region component. The problem occurred when a region was deleted, and previously assigned targets still held...
WordPress Homey Theme <= 2.4.4 is vulnerable to Insecure Direct Object References (IDOR)
Software Homey Type Theme Vulnerable versions = 2.4.4 Fixed in 2.4.5 OWASP Top 10 A7: Identification and Authentication Failures Classification Insecure Direct Object References IDOR CVE CVE-2025-1327 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d8b4f513f58e Credits a00...
Sematell ReplyOne 安全漏洞
Sematell ReplyOne is an artificial intelligence-based reply management software from Sematell. A security vulnerability exists in Sematell ReplyOne version 7.4.3.0, which stems from insufficient permissions on the /rest/sessions endpoint and could lead to unsafe direct object references...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from sctpsendmsg not detecting released transfer references, which could lead to reuse after release...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a leak in the inode list in the btrfs resolveindirectrefs error path, which could lead to a memory leak...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: heap buffer over write vulnerability in GhostScript's lp8000printpage in...
Fedora: Security Advisory (FEDORA-2025-97687e7f68)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.10.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...
CVE-2025-32985
creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13533 2025-04-25 23:20:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedgb2bx2s 2025-04-26 01:52:30+00:00| seen| https://t.me/cvedetector/23786 2025-04-28...
Updated haproxy packages fix security vulnerability
BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refsAleandro Prudenzano of Doyensec and Edoardo Geraci of Codean Labs reported a bug in sampleconvregsub, which can cause replacements of multiple back-references to overflow the temporary trash buffer. The problem happen...
Ubuntu: Security Advisory (USN-7455-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...