[SECURITY] Fedora 41 Update: java-latest-openjdk-24.0.2.0.12-1.rolling.fc41

The OpenJDK 24 runtime environment...

[SECURITY] Fedora 41 Update: java-21-openjdk-21.0.8.0.9-1.fc41

The OpenJDK 21 runtime environment...

Commvault for Windows 安全漏洞

Commvault for Windows is a data backup, recovery software from Commvault Inc. in the United States. A security vulnerability exists in Commvault for Windows versions 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0, which stems from an elevation of privilege that could lead to unauthorized access...

Tenda AC20 安全漏洞

Tenda AC20 is a dual-band wireless router with IPv6 protocol support, featuring a triple-core 1GHz main controller with six 6dBi external antennas and a maximum wireless transmission rate of 2033Mbps. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from improper handli...

USN-7668-1 openjdk-21 vulnerabilities

It was discovered that the 2D component of OpenJDK 21 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 Mashroor Hasan Bhuiyan discovered that the JSSE...

CVE-2022-28908

creationtimestamp| type| source ---|---|--- 2025-07-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw54xgs52h 2026-06-23 14:06:15+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f004326b-3257-4ea8-ad62-3479a1856388...

CVE-2023-4732

creationtimestamp| type| source ---|---|--- 2025-07-23 19:38:11+00:00| seen| Telegram/xEk8KOSOG5dsBH4eG1REY0Iw9fkvlEuUhEsagjBTpj4zwc...

CVE-2025-54447

creationtimestamp| type| source ---|---|--- 2025-07-23 08:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumkib7pou2j 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-663/...

CVE-2025-6261

creationtimestamp| type| source ---|---|--- 2025-07-23 07:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhbd2ljf2d...

CVE-2022-26805

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:40+00:00| seen| Telegram/PtaIsRZ5428zjyZEG78-OVVGhLvEn0g7CnfbcDrmUWHSE...

CVE-2022-26806

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:39+00:00| seen| Telegram/SHqqzSkzknyqU-PwsKz6vwO2B96jWlWFeCNgFDkIrn9-5Dw...

CVE-2022-41077

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:32+00:00| seen| Telegram/RpMW-dV4Ll-Kyzjuz9wIbxv8RLGRfQPDTucvkXENNlKE...

SUSE CVE-2025-27209

The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who can control the strings to be hashed can generate many hash collisions - an attacker can generate collisions even witho...

CVE-2025-7382

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 21.0.2 can lead to adjacent attackers achieving pre-auth code execution on High Availability HA auxiliary devices, if OTP authentication for the admin user is enabled...

CVE-2025-2301

creationtimestamp| type| source ---|---|--- 2025-07-21 12:32:15+00:00| seen| Telegram/R5qNJgoXRnaopbEks7cOd0eCOIHM6nbycrZZiTFYkaIhEE...

Westermo WeOS 日志信息泄露漏洞

Westermo WeOS is an operating system from Westermo Sweden. A log information disclosure vulnerability exists in Westermo WeOS versions 5.24 through 5.24.4, which originates from the disclosure of system log information and could lead to the disclosure of sensitive information...

SUSE CVE-2025-53816

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

SUSE CVE-2025-53817

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

CVE-2025-7805

creationtimestamp| type| source ---|---|--- 2025-07-18 22:36:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lubj352aow2i 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:42+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

Node.js 安全漏洞

Node.js is an open source, cross-platform JavaScript runtime environment from the Node.js open source. A security vulnerability exists in Node.js version v24.x, which stems from an improper implementation of string hash computation and could lead to a hash collision attack...