1938 matches found
This Week in Spring - September 16th, 2025
Hi, Spring fans! Welcome to another extra special installment of This Week in Spring , wherein we celebrate a very auspicious day indeed: the release of Java 25 and GraalVM 25! That's right: an incredible new iteration of the JVM has just dropped and with it come a ton of features! Let's go throu...
Amazon Linux 2 : gstreamer1-plugins-base, --advisory ALAS2-2025-3002 (ALAS-2025-3002)
The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3002 advisory. In GStreamer through 1.26.1, the subparse plugin's parsesubriptime function may write data past the bound...
Important: kernel-livepatch-5.10.238-231.953
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing CVE-2025-38386 Affected Packages: kernel-livepatch-5.10.238-231.953 Issue Correction: Please ensure you have live patching enabled. Run yum update...
CVE-2022-50309
In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvipgraphdmainit ofgetchildbyname returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...
CVE-2022-50290
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-50268
In the Linux kernel, the following vulnerability has been resolved: mmc: moxart: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...
CVE-2022-50305
In the Linux kernel, the following vulnerability has been resolved: ASoC: sofes8336: fix possible use-after-free in sofes8336remove sofes8336remove calls canceldelayedwork. However, that function does not wait until the work function finishes. This means that the callback function may still be...
CVE-2022-50235
In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer overflow attack...
Slackware: Security Advisory (SSA:2025-255-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-10329
creationtimestamp| type| source ---|---|--- 2025-09-12 23:12:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyof74nckz2x...
BELL-CVE-2025-39785
Bulletin has no description...
CVE-2025-4974
creationtimestamp| type| source ---|---|--- 2025-09-12 00:52:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lym2ccc3jn2c...
CVE-2025-54240
After Effects versions 25.3, 24.6.7 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure, potentially disclosing sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-23343
creationtimestamp| type| source ---|---|--- 2025-09-11 20:48:38+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lylmoooi2c2r...
CVE-2025-39768
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix complex rules rehash error flow Moving rules from matcher to matcher should not fail. However, if it does fail due to various reasons, the error flow should allow the kernel to continue functioning albeit with...
CVE-2025-39736
In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving prwarn outside kmemleaklock When netpoll is enabled, calling prwarnonce while holding kmemleaklock in mempoolalloc can cause a deadlock due to lock inversion with the netconsole subsystem. Th...
CVE-2025-8215
creationtimestamp| type| source ---|---|--- 2025-09-11 07:37:05+00:00| seen| Telegram/RJOaIsvXdFdYr5LgipcD8MvrFWDr5kgpEfZPVUkczjI5Is...
PT-2025-37183
In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known...
CVE-2025-54123
creationtimestamp| type| source ---|---|--- 2025-09-10 18:35:23+00:00| published-proof-of-concept| https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-r4h8-hfp2-ggmf 2025-09-11 00:01:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyjgypjbwa2s 2025-09-11...