Linux Distros Unpatched Vulnerability : CVE-2025-37984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ecdsa - Harden against integer overflows in DIVROUNDUP Herbert notes that DIVROUNDUP may overflow unnecessarily if an ecdsa implementation's -keysize...

Linux Distros Unpatched Vulnerability : CVE-2024-46692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark getwqctx as atomic call Currently getwqctx is wrongly configured a...

Linux Distros Unpatched Vulnerability : CVE-2024-23850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In btrfsgetrootref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too...

Linux Distros Unpatched Vulnerability : CVE-2024-26617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: move mmu notification mechanism inside mm lock Move mmu notification...

Linux Distros Unpatched Vulnerability : CVE-2025-38461

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect...

Linux Distros Unpatched Vulnerability : CVE-2024-6174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configuration...

Linux Distros Unpatched Vulnerability : CVE-2019-15239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, a certain net/ipv4/tcpoutput.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm...

Linux Distros Unpatched Vulnerability : CVE-2023-52928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Skip invalid kfunc call in backtrackinsn The verifier skips invalid kfunc call in checkkfunccall, which would be captured in fixupkfunccall if such insn is...

Linux Distros Unpatched Vulnerability : CVE-2022-39394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of the...

Linux Distros Unpatched Vulnerability : CVE-2020-26967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those...

Linux Distros Unpatched Vulnerability : CVE-2024-38587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof vs ARRAYSIZE bug The buf pointer is an array of u16 values. This code...

Linux Distros Unpatched Vulnerability : CVE-2021-33054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the...

CVE-2025-8740

creationtimestamp| type| source ---|---|--- 2025-08-08 23:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvwghndgun2c...

CVE-2025-8741

creationtimestamp| type| source ---|---|--- 2025-08-08 23:36:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvwg6oomdi2q...

CVE-2025-8735

creationtimestamp| type| source ---|---|--- 2025-08-08 19:35:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvvyr4jpsc2e...

CVE-2025-47872 EG4 Electronics EG4 Inverters Observable Discrepancy

The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and unregistered, valid but already registered, or does not exist in the database. Combined with the fact that serial numbers are sequentially assigned, this allows an attacker to gai...

CVE-2025-52586

The CVE-2025-52586 issue affects EG4 Electronics EG4 Inverters, where MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext. The root impact described across sources is interception, manipulation, replay, or forging of sensitive commands/data (voltag...

CVE-2025-8706

creationtimestamp| type| source ---|---|--- 2025-08-08 05:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvui55aceo2l...

CVE-2025-54606

Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

Linux Distros Unpatched Vulnerability : CVE-2019-9820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This...