592 matches found
CVE-2025-38418 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38418 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38319 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38319 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
nodejs:22 security update
nodejs 1:22.16.0-2 - Patch fix for CVE-2025-6965 Resolves: RHEL-103851 nodejs-nodemon nodejs-packaging...
git: Git arbitrary code execution
A line-end handling flaw was found in Git. When writing a config entry, values with a trailing carriage return CR are not quoted, resulting in the CR being lost when the config is read later. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read,...
CVE-2025-6491
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server...
cjson: segmentation violation trigger through the second parameter of function cJSON_SetValuestring at cJSON.c
A flaw was found in cJSON. This issue contains a segmentation violation, which can trigger through the second parameter of the cJSONSetValuestring function at cJSON.c...
SUSE CVE-2025-6555
Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
net/http: Request smuggling due to acceptance of invalid chunked data in net/http
A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...
GHSA-8QVM-5X2C-J2W7 vulnerabilities
Vulnerabilities for packages: kserve, request-1276, spamcheck, ghidra, nemo, awx, text-generation-inference...
OS Command Exec, Unix Command Shell, Reverse TCP (via AWK)
Execute an OS command from PHP. Creates an interactive shell via GNU AWK Module Options msf use payload/php/unix/cmd/reverseawk msf payloadreverseawk show actions ...actions... msf payloadreverseawk set ACTION msf payloadreverseawk show options ...show and set options... msf payloadreverseawk run...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
GHSA-C72G-53HW-82Q7 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2016-9843 affecting package fltk for versions less than 1.3.8-1
CVE-2016-9843 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...
nginx: specially crafted MP4 file may cause denial of service
A flaw was found in the ngxhttpmp4module module of Nginx. Processing a specially crafted MP4 file can trigger a buffer over-read and cause the nginx process to terminate, resulting in a denial of service...
kernel: ipvs: properly dereference pe in ip_vs_add_service
An improper dereference was found in the Linux kernel in ipvsaddservice. This may lead to a crash...
[SECURITY] Fedora 40 Update: java-17-openjdk-17.0.15.0.6-1.fc40
The OpenJDK 17 runtime environment...
CVE-2025-23147
In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3cmasterqueueibi The I3C master driver may receive an IBI from a target device that has not been probed yet. In such cases, the master calls i3cmasterqueueibi to queue an IBI work task, leading to...
GHSA-RC42-6C7J-7H5R vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, camunda-zeebe...
CVE-2025-22071
In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufscreatecontext Leak fixes back in 2008 missed one case - if we are trying to set affinity and spufsmkdir fails, we need to drop the reference to neighbor...