CVE-2025-36092

CVE-2025-36092 affects IBM Cloud Pak for Business Automation (25.0.0, 24.0.1, 24.0.0) and stems from improper validation of input length, allowing an authenticated user to cause a denial of service. IBM’s sources confirm the issue and provide targeted fixes: 25.0.0 should install security fix 25....

CVE-2025-12438

creationtimestamp| type| source ---|---|--- 2025-11-03 08:31:10+00:00| seen| https://gist.github.com/Darkcrai86/76d795e531836dad5246bd02bb377da8 2025-11-10 21:44:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5clr7l44a2u 2025-11-10 23:25:44+00:00| seen|...

MINI-25MH-F4VR-96PR

Bulletin has no description...

MINI-PWV5-GF25-P2P5

Bulletin has no description...

CVE-2025-22046

creationtimestamp| type| source ---|---|--- 2025-10-31 20:57:37+00:00| seen| Telegram/lnHOJC0WHaL9FfDxaV1qNcZNom0a6mbwcnf711WBIsEE...

Impact Of CVE-2025-55752 And CVE-2025-55754 On EPMM, Sentry, Connector

Last Modified Date Oct 31, 2025 3:15:00 PM...

BELL-CVE-2025-40100

Bulletin has no description...

CVE-2025-40086

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict other buffer objects BOs within the same VM under certain conditions, which may lead to NULL pointer dereferences late...

CVE-2025-40092

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Refactor bind path to use free After an bind/unbind cycle, the ncm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

DEBIAN-CVE-2025-10920

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

BELL-CVE-2025-40054

Bulletin has no description...

CVE-2025-40050

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPFNEG if dst is a pointer In checkaluop, the verifier currently calls checkregarg and adjustscalarminmaxvals unconditionally for BPFNEG operations. However, if the destination register holds a...

OPENSUSE-SU-2025:15674-1 java-25-openjdk-25.0.1.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

Amazon Linux 2 : glibc, --advisory ALAS2-2025-3040 (ALAS-2025-3040)

The version of glibc installed on the remote host is prior to 2.26-64. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3040 advisory. The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It...

CVE-2025-40778 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21638)

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: authenable: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

Debian: Security Advisory (DSA-6039-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-12204

A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rvedestroy of the file src/core/rvalue.c of the component Configuration File Handler. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed...

[SECURITY] [DSA 6039-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6039-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 26, 2025 https://www.debian.org/security/faq -...