10169 matches found
CVE-2022-50701
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host SDIO may need addtional 511 bytes to align bus operation. If the tailroom of this skb is not big enough, we would access invalid memory region. For low level...
CVE-2025-68728
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix uninit memory after failed miread in miformatnew Fix a KMSAN un-init bug found by syzkaller. ntfsgetbh expects a buffer from sbgetblk, that buffer may not be uptodate. We do not bring the buffer uptodate before setting...
CVE-2025-68351
In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfatfind Fix refcount leaks in exfatfind related to exfatgetdentryset. Function exfatgetdentryset would increase the reference counter of es-bh on success. Therefore, exfatputdentryset must be called...
GHSA-C4P6-QG4M-9JMR vulnerabilities
Vulnerabilities for packages: kserve, k8sgpt...
GHSA-73F7-3C45-6H89 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XMJJ-27J3-8W2G vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GV8F-9G4R-FJ8Q vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R5QP-7H29-V42W vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-14373 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R5QP-7H29-V42W vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-68329
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARNON in tracingbuffersmmapclose for split VMAs When a VMA is split e.g., by partial munmap or MAPFIXED, the kernel calls vmops-close on each portion. For trace buffer mappings, this results in ringbufferunmap being...
CVE-2025-68388 vulnerabilities
Vulnerabilities for packages: apm-server, cloudbeat-fips, cloudbeat, apm-server-fips, elastic-agent-fips, elastic-agent...
GHSA-3677-XXCR-WJQV vulnerabilities
Vulnerabilities for packages: prometheus-jmx-exporter, confluent-common-docker, hadoop-fips, kafka, strimzi-kafka-operator, kayenta-fips, kayenta, apache-pulsar...
SUSE CVE-2025-14876
A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...
GHSA-W853-JP5J-5J7F vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow, py3-cassandra-medusa, kserve...
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...
CVE-2025-68156 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, jaeger, coredns, splunk-otel-collector, argo-rollouts, k8sgpt, opentelemetry-collector, argo-cd, grafana-alloy, kine, datadog-agent, vale, verticadb-operator, kargo, k8sgateway, amazon-cloudwatch-agent, argo-workflows, tempo, aws-otel-collector,...
GHSA-CFPF-HRX2-8RV6 vulnerabilities
Vulnerabilities for packages: eks-distro, nrdot-collector-k8s-fips, eks-distro-fips, nats, verticadb-operator, aws-otel-collector-fips, argo-workflows-fips, elastic-agent-fips, keda-fips, jaeger, datadog-agent, jaeger-fips, kserve, opentelemetry-collector-contrib-fips, argo-cd-fips, argo-workflow...
SUSE CVE-2022-25837
Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR Secure Connections pairing and the other BR/EDR Legacy PIN code pairing if the MITM...