10156 matches found
CVE-2025-1149
A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rathe...
tbb security update
2020.3-8.1 - Remove jQuery from Doxygen output RHEL-77693...
CVE-2024-57949
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable interrupts in itsirqsetvcpuaffinity The following call-chain leads to enabling interrupts in a nested interrupt disabled section: irqsetvcpuaffinity irqgetdesclock rawspinlockirqsave --- Disable...
CVE-2025-21685
In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race The yt21380fcserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointe...
CVE-2025-21684
In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: Convert gpiolock to raw spinlock irqchip functions may be called in raw spinlock context. Therefore, we must also use a raw spinlock for our own internal locking. This fixes the following lockdep splat: 5.349336...
CVE-2024-57949
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable interrupts in itsirqsetvcpuaffinity The following call-chain leads to enabling interrupts in a nested interrupt disabled section: irqsetvcpuaffinity irqgetdesclock rawspinlockirqsave --- Disable...
[SECURITY] Fedora 40 Update: vaultwarden-1.33.0-1.fc40
Unofficial Bitwarden compatible server...
[SECURITY] Fedora 41 Update: rust-openssl-sys-0.9.105-1.fc41
FFI bindings to OpenSSL...
[SECURITY] Fedora 41 Update: rust-openssl-0.10.70-1.fc41
OpenSSL bindings...
[SECURITY] Fedora 41 Update: keylime-agent-rust-0.2.7-4.fc41
Rust agent for Keylime...
CVE-2025-23085 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2025-23085
A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory...
CVE-2025-23085
A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory...
CVE-2025-23217
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...
GHSA-PQ2G-WX69-C263 vulnerabilities
Vulnerabilities for packages: apicurio-registry, trino, opensearch, dependency-track, akhq, apache-nifi...
[SECURITY] Fedora 41 Update: java-11-openjdk-11.0.26.0.4-1.fc41
The OpenJDK 11 runtime environment...
CVE-2024-57699 vulnerabilities
Vulnerabilities for packages: apicurio-registry, trino, opensearch, dependency-track, akhq, apache-nifi...
CVE-2024-57699
A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service DoS. This issue exists because of an incomplete fix for...