10213 matches found
CVE-2025-10911
A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
CVE-2025-23346
NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of service...
CVE-2025-23308
NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the user to run nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level o...
ROS-20250924-07
A vulnerability in the GIMP graphics editor is related to an integer overflow when analyzing ICO files. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system...
GHSA-Q58R-HWC8-RM9J vulnerabilities
Vulnerabilities for packages: rancher-api-ui...
CVE-2025-39870
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxdsetupwqs The clean up in idxdsetupwqs has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are: 1 If...
CVE-2025-39868
In the Linux kernel, the following vulnerability has been resolved: erofs: fix runtime warning on truncatefoliobatchexceptionals Commit 0e2f80afcfa6"fs/dax: ensure all pages are idle prior to filesystem unmount" introduced the WARNONONCE to capture whether the filesystem has removed all DAX entri...
GHSA-W7R3-MGWF-4MQQ vulnerabilities
Vulnerabilities for packages: kubernetes-reflector...
CVE-2025-59432
SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because Arrays.equals...
ROS-20250922-10
A vulnerability in the getpeername function of the WSGI server for python Waitress is related to the non-release of a resource after a valid exploitation period has expired. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
SUSE CVE-2025-21588
unknown...
CVE-2025-59474 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-223M-4RFP-646H vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-QRH5-JG98-CR48 vulnerabilities
Vulnerabilities for packages: jenkins...
CVE-2025-59476 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-223M-4RFP-646H vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-37PP-XMCW-VG4W vulnerabilities
Vulnerabilities for packages: ffmpeg...
SUSE CVE-2025-21584
unknown...