4844 matches found
PT-2025-51580
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's gpiolib component related to invalid pointer access within the debugfs interface. Specifically, if memory allocation within the gpiolib seq start...
CVE-2025-14656
A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation of the argument schedStartTime/schedEndTime can lead to buffer overflow. The attack may be performed from remote. The exploit has been made availab...
Cross-site Request Forgery (CSRF)
org.jenkins-ci.plugins, windocks-start-container is vulnerable to cross-site request forgery CSRF. The vulnerability is due to insufficient request validation, which allows an attacker to trick users into initiating connections to an attacker-specified URL...
CVE-2025-55310
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991210)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991210 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback...
EUVD-2025-202709
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991145 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...
CVE-2025-66626
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions 3.6.13 and below and versions 3.7.0 through 3.7.4, contain unsafe untar code that handles symbolic links in archives. Concretely, the computation of a link's target and the...
Security Bulletin: IBM Edge Data Collector uses django-4.2.24-py3-none-any.whl which is vulnerable to CVE-2025-59681, CVE-2025-59682.
Summary IBM Edge Data Collector uses django-4.2.24-py3-none-any.whl which is vulnerable to CVE-2025-59681, CVE-2025-59682. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-59681 DESCRIPTION: An issue was discovered in Django 4.2 before 4.2.25,...
kernel: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
A use after free exists in the wifi module of the linux kernel in the function brcmfnetdevstartxmit,thereby leading to damage to system availability and integrity...
CVE-2023-53866
CVE-2023-53866 - Linux kernel (ASoC: soc-compress) impact and fix Affected software: Linux kernel ASoC subsystem, specifically the soc-compress path used for DPCM (dynamic PCM) processing. Root cause: Functions such as dpcm_be_connect, dpcm_be_disconnect, snd_soc_runtime_action, and dpcm_dapm_str...
PT-2025-49744
In the Linux kernel, the following vulnerability has been resolved: netlink: annotate accesses to nlk-cb running Both netlink recvmsg and netlink native seq show read nlk-cb running locklessly. Use READ ONCE there. Add corresponding WRITE ONCE to netlink dump and netlink dump start syzbot reporte...
CVE-2025-48588
In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-53766 FS: JFS: Check for read-only mounted filesystem in txBegin
In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Check for read-only mounted filesystem in txBegin This patch adds a check for read-only mounted filesystem in txBegin before starting a transaction potentially saving from NULL pointer deref...
The vulnerability of the rtl8150_start_xmit() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtl8150startxmit function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Exploit for CVE-2025-55182
React 19 & Next.js Security Fix Prompts for AI Agents 🚨 CRI...
CVE-2025-58481
Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service...
MAL-2025-191503 Malicious code in start-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a0cd368d9612b95c373551c4e8e15faac47d990feaba41964d85e4eff4b09 The package start-internal was found to contain malicious code...
Malicious code in start-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a0cd368d9612b95c373551c4e8e15faac47d990feaba41964d85e4eff4b09 The package start-internal was found to contain malicious code...