3405 matches found
CVE-2025-49177
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...
CVE-2025-49175
A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...
gimp security update
2:2.99.8-4.2 - fix CVE-2025-5473 RHEL-95700 2:2.99.8-4.1 - fix CVE-2025-48797 RHEL-93521 - fix CVE-2025-48798 RHEL-93522...
CVE-2025-49175
A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...
libvpx security update
1.7.0-12 - Add patch for double free Resolves: RHEL-93914...
CVE-2025-22239
Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...
CVE-2025-30687 affecting package mysql for versions less than 8.0.42-1
CVE-2025-30687 affecting package mysql for versions less than 8.0.42-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-9512
Removed by vendor...
CVE-2025-0673
Removed by vendor...
[SECURITY] Fedora 42 Update: qt6-qtnetworkauth-6.9.1-1.fc42
Qt6 - NetworkAuth component...
[SECURITY] Fedora 42 Update: fcitx5-qt-5.1.9-7.fc42
Qt library and IM module for fcitx5...
IBM Db2 Denial of Service Vulnerability (CNVD-2025-12295)
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
CVE-2025-47950 vulnerabilities
Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...
CVE-2025-5918
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memo...
OS Command Exec, Unix Command Shell, Bind TCP (via netcat -e)
Execute an OS command from PHP. Listen for a connection and spawn a command shell via netcat Module Options msf use payload/php/unix/cmd/bindnetcatgaping msf payloadbindnetcatgaping show actions ...actions... msf payloadbindnetcatgaping set ACTION msf payloadbindnetcatgaping show options ...show...
CVE-2025-5399
Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...
CVE-2025-48387 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, tileserver-gl, code-server, sqlpad, jitsucom-jitsu, tileserver-gl-fips, gitlab-rails-ce-fips, kibana...
[SECURITY] Fedora 41 Update: emacs-30.1-5.fc41
GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for Wayland, using t...
