4954 matches found
CVE-2025-11375
Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...
CVE-2024-45777 affecting package grub2 for versions less than 2.06-25
CVE-2024-45777 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...
CVE-2025-58058 affecting package packer for versions less than 1.9.5-10
CVE-2025-58058 affecting package packer for versions less than 1.9.5-10. A patched version of the package is available...
CVE-2021-38561 affecting package podman for versions less than 5.6.1-2
CVE-2021-38561 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2024-45310 affecting package buildah for versions less than 1.41.4-2
CVE-2024-45310 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2020-28851 affecting package buildah for versions less than 1.41.4-2
CVE-2020-28851 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2022-32149 affecting package podman for versions less than 5.6.1-2
CVE-2022-32149 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6
CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6. A patched version of the package is available...
GHSA-64W3-5Q9M-68XF vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2025-40070
In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in ppsregistercdev when register device fail Similar to previous commit 2a934fdb01db "media: v4l2-dev: fix error handling in videoregisterdevice", the release hook should be set before deviceregister. Otherwise,...
CVE-2025-40061
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race in dotask when draining When dotask exhausts its iteration budget !ret, it sets the state to TASKSTATEIDLE to reschedule, without a secondary check on the current task-state. This can overwrite the...
CVE-2025-40032
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release The fields dmachantx and dmachanrx of the struct pciepftest can be NULL even after EPF initialization. Then it is prudent to check that they have non-NUL...
CVE-2025-61104
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyunknowntlv function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...
GHSA-J3W4-M6QJ-VMM5 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2025-12204
A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rvedestroy of the file src/core/rvalue.c of the component Configuration File Handler. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed...
CVE-2025-12206
A flaw has been found in Kamailio 5.5. The impacted element is the function rveisconstant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. It is still unclear if this...
CVE-2025-12205
A vulnerability was detected in Kamailio 5.5. The affected element is the function srpushyystate of the file src/core/cfg.lex of the component Configuration File Handler. The manipulation results in use after free. The attack must be initiated from a local position. The exploit is now public and...
CVE-2025-9158
The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML sanitization. XSS vulnerability allows an attacker to send a specifically crafted e-mail enabling JavaScript code execution by displaying th...
thunderbird: firefox: Memory safety bugs
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corrupti...