24141 matches found
OESA-2025-1748 p7zip security update
7za for Linux system to archive file as 7z file format Security Fixes: The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 for 7zz contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512i-2, for i=9,...
OESA-2025-1756 djvulibre security update
DjVu is a set of compression technologies, a file format, and a software platform for the deliveryover the Web of digital documents, scanned documents, and high resolution images.DjVu documents download and display extremely quickly, and look exactly the same on all platforms with no compatibilit...
usb: typec: ucsi: displayport: Fix NULL pointer access
...
driver core: fix potential NULL pointer dereference in dev_uevent()
...
ksmbd: prevent rename with empty string
...
ksmbd: fix session use-after-free in multichannel connection
...
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
...
CVE-2025-5992
Qt evolves a DoS issue: passing values outside the expected range to QColorTransferGenericFunction can be triggered by a crafted ICC profile used with QColorSpace::fromICCProfile. Affected releases are Qt 6.6.0–6.8.3 and 6.9.0–6.9.1. The vulnerability is fixed in Qt 6.8.4 and 6.9.2. Impact is des...
CVE-2025-52994
The CVE-2025-52994 entry describes an OS Command Injection in phpThumb prior to version 1.7.24, caused by gif_outputAsJpeg in phpthumb.gif.php when given a crafted parameter. Affected versions include 1.7.23 and earlier; the issue is fixed in 1.7.23-202506081709, with advisories indicating upgrad...
SUSE CVE-2025-38279
In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue 1 where the following warning appears in kernel dmesg: 60.643604 verifier backtracking bug 60.643635 WARNING: CPU: 10 PID: 2315...
CVE-2025-53542 Kubernetes Headlamp Allows Arbitrary Command Injection in macOS Process headlamp@codeSign
Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script used in the macOS packaging workflow of the Kubernetes Headlamp project. This issue arises due to the improper use of Node.js's execSync function with unsanitized input derived...
CVE-2025-27613
Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled...
CVE-2025-46835 Git GUI can create and overwrite files for which the user has write permission
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permissio...
CVE-2025-46835 Git GUI can create and overwrite files for which the user has write permission
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permissio...
CVE-2025-46835
Git GUI is vulnerable to arbitrary file creation/overwrites when a user clones an untrusted repository and is tricked into editing a file under a maliciously named directory; this can affect files the user can write. The issue is fixed in Git GUI versions 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2...
CVE-2025-37800 affecting package kernel for versions less than 6.6.92.2-1
CVE-2025-37800 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-37836 affecting package kernel for versions less than 6.6.92.2-1
CVE-2025-37836 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-46334 Git GUI malicious command injection on Windows
Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable always includes...
CVE-2025-27613
Gitk (the Tcl/Tk based Git history browser) is affected by CVE-2025-27613. When a user clones an untrusted repository and runs gitk without extra arguments, files that the user can write to may be created and truncated. The vulnerability is triggered by the per-file encoding option in Gitk’s Pref...