10213 matches found
CVE-2025-40077
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio-index from pgofft to lofft to avoid overflow while left shift operation...
CVE-2025-40069
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...
CVE-2025-40052
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix crypto buffers in non-linear memory The crypto API, through the scatterlist API, expects input buffers to be in linear memory. We handle this with the cifssgsetbuf helper that converts vmalloc'd memory to their...
ROS-20251028-04
The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...
CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1
CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1. A patched version of the package is available...
CVE-2025-8677 vulnerabilities
Vulnerabilities for packages: bind...
GHSA-J3W4-M6QJ-VMM5 vulnerabilities
Vulnerabilities for packages: bind...
GHSA-924G-F9MR-CM6X vulnerabilities
Vulnerabilities for packages: bind...
CVE-2025-55754
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...
CVE-2025-62708 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2025-62611 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2025-12207
A vulnerability has been found in Kamailio 5.5. This affects the function yyerrorat of the file src/core/cfg.y of the component Grammar Rule Handler. Such manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed to the public and may...
GHSA-H5FG-JPGR-RV9C vulnerabilities
Vulnerabilities for packages: prometheus-jmx-exporter, keycloak-fips, strimzi-kafka-operator, keycloak...
CVE-2025-40023
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs can't read BMGPCIECAP0x138340 register nor access PCODE already guarded by the info.skippcode flag so we shouldn't expose attributes that require any of them to...
CVE-2025-62395
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...
CVE-2025-62396
An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...
CVE-2025-62401
An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...
CVE-2025-62399
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...