2752 matches found
CVE-2022-50135
Summary (CVE-2022-50135): In the Linux kernel, the RDMA/rxe path contains a bug where, during error handling in rxe_qp_from_init, the qp’s rcq and scq are set to NULL, but later in rxe_qp_do_cleanup they are dereferenced (qp->scq->num_wq and qp->rcq->num_wq). This results in a null-pt...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from orangefs truncating file sizes on 32-bit systems...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iomap: Avoid truncating the 64-bit offset to 32 bits. On 32-bit kernels, iomapwritedelallocscan inadvertently used a 32-bit position due to folionextindex returning a unsigned long value. This could lead to an infinite loop when...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: The current directory offset allocator based on mtreealloccyclic stores the next offset value to be returned in octx-nextoffset. This mechanism typically returns values that increase monotonically over time. Eventually, however,...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: filemap: Avoid truncating the 64-bit offset to 32 bits. On 32-bit kernels, the folioseekholedata function inadvertently truncated a 64-bit value to 32 bits, which could lead to an infinite loop when writing to an xfs filesystem...
CVE-2025-49133
creationtimestamp| type| source ---|---|--- 2025-06-10 20:31:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17994 2025-07-30 18:05:38+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lv77jnzi732z 2025-07-30 18:06:21+00:00| seen|...
OESA-2025-1596 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput pcigetdevice will increase the reference count for the returned pcidev. We need to use...
CVE-2025-1235 WAGO: Switches affected by year 2k38 problem
A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970...
CVE-2025-5388
creationtimestamp| type| source ---|---|--- 2025-05-31 19:34:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiijnarr452 2025-05-31 21:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqipny77qt2s...
CVE-2025-5390
creationtimestamp| type| source ---|---|--- 2025-05-31 19:34:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiijhpicxr2 2025-05-31 21:52:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqiq7vg22r2e 2025-06-01...
CVE-2025-5292
creationtimestamp| type| source ---|---|--- 2025-05-31 07:12:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zl7unqc2 2025-05-31 11:47:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhogp32z62p...
CVE-2025-48865
creationtimestamp| type| source ---|---|--- 2025-05-28 22:32:03+00:00| published-proof-of-concept| https://github.com/fabiolb/fabio/security/advisories/GHSA-q7p4-7xjv-j3wf 2025-05-30 06:49:22+00:00| seen|...
A Systematic Classification of Vulnerabilities in MoveEVM Smart Contracts (MWC)
We introduce the MoveEVM Weakness Classification MWC system -- a dedicated vulnerability taxonomy for smart contracts built with Move and executed in EVM-compatible environments. While Move was originally designed to prevent common security flaws via linear resource types and strict ownership, it...
Sony SNC-M1 安全漏洞
Sony SNC-M1 is a webcam from Sony Japan. A security vulnerability exists in Sony SNC-M1 version 1.30 and earlier, which stems from the use of default credentials in the management interface...
Security update for python36-setuptools
This update for python36-setuptools fixes the following issues: CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2025:01693-1 Security update for python36-setuptools
This update for python36-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313...
CVE-2024-26351
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updateplace.php...
CVE-2023-3712
Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version...
CVE-2023-41139
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...