Linux Distros Unpatched Vulnerability : CVE-2024-21896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The permission model protects itself against path traversal attacks by calling path.resolve on any paths given by the user. If the path is to be treated as a...

Adobe Substance3D Painter Out-of-Bounds Read Vulnerability (CNVD-2025-19218)

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Painter Out-of-Bounds Write Vulnerability (CNVD-2025-19237)

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds write vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to execute...

Schneider Electric SESU 后置链接漏洞

Schneider Electric SESU is a module for optimizing the efficiency of energy usage from Schneider Electric France. A backlink vulnerability exists in Schneider Electric SESU that stems from improper link resolution and could result in elevation of privilege or denial of service...

CVE-2025-38546 atm: clip: Fix memory leak of struct clip_vcc.

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clipvcc. ioctlATMARPMKIP allocates struct clipvcc and set it to vcc-userback. The code assumes that vccdestroysocket passes NULL skb to vcc-push when the socket is closed, and then clippush...

Exploit for CVE-2024-32019

CVE-2024-32019 — Netdata ndsudo Local Privilege Escalation...

CVE-2025-38508

The CVE-2025-38508 entry describes a Linux kernel vulnerability in x86/SEV: when Secure TSC is enabled, GUEST_TSC_FREQ is derived from the P0 frequency and diverges from the mean TSC frequency, causing clock skew in SEV-SNP VMs and resulting in hrtimer interrupts firing earlier than expected. The...

OESA-2025-2011 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

SUSE CVE-2025-49090

The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds write vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to execute...

BIT-LIBPHP-2023-0568 Array overrun in common path resolve code

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value,...

RHEL 8 : unbound (RHSA-2025:13575)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13575 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound Cache poisoning...

Linux Distros Unpatched Vulnerability : CVE-2021-47345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/cma: Fix rdmaresolveroute memory leak Fix a memory leak when mdaresolveroute is called more than once on the same rdmacmid. This is possible if...

CVE-2025-50086 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50086 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2023-5679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bad interaction between DNS64 and serve-stale may cause named to crash with an assertion failure during recursive resolution, when both of these features are...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in their dependence on the reverse DNS resolver, which allows a hacker to cause a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the dependence of critical operations on the reverse DNS solution. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2022-49808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit...

Advisory ROSA-SA-2025-2950

software: assimp 5.0.1 OS: ROSA-CHROME unaffected versions = assimp-5.0.1.1-6 affected versions assimp-5.0.1.1-6 CVE-ID: CVE-2024-45679 BDU-ID: 2025-02665 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the 3D model import library Open Asset Import Library Assimp is related to a buffer overflow in...

Advisory ROSA-SA-2025-2945

software: curl 8.7.1 OS: ROSA-CHROME unaffected versions = curl-8.7.1-3 affected versions curl-8.7.1-3 CVE-ID: CVE-2025-0725 BDU-ID: 2025-01585 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the gzipdowrite function of the zlib compression library of the cURL command line utility is related to...