10167 matches found
CVE-2025-38351
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: serve, kubeflow-katib, kubeflow-centraldashboard, code-server, sqlpad, thingsboard, argo-workflows, tileserver-gl, json-server...
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, argo-workflows, kubeflow-centraldashboard, sqlpad, gitlab-rails-ce, thingsboard, code-server, kubeflow-katib, serve, tileserver-gl, vitess, tileserver-gl-fips, json-server...
CVE-2025-7395
A certificate verification error in wolfSSL when building with the WOLFSSLSYSCACERTS and WOLFSSLAPPLENATIVECERTVALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardles...
CVE-2025-7394
In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...
CVE-2025-54310
qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp...
CVE-2025-6197
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...
CVE-2025-6023
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...
CVE-2025-53506 vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-25XR-QJ8W-C4VF vulnerabilities
Vulnerabilities for packages: tomcat...
CVE-2025-53643 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, airflow, dask-kubernetes...
CVE-2025-53643 vulnerabilities
Vulnerabilities for packages: text-generation-inference, request-1276, py3-cassandra-medusa, dask-kubernetes, airflow, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, airflow-core, py3-vllm-cuda-12.4...
GHSA-9548-QRRJ-X5PJ vulnerabilities
Vulnerabilities for packages: text-generation-inference, request-1276, py3-cassandra-medusa, dask-kubernetes, airflow, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, airflow-core, py3-vllm-cuda-12.4...
GHSA-25XR-QJ8W-C4VF vulnerabilities
Vulnerabilities for packages: tomcat...
CVE-2025-53816
7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...
CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2025-1713
When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock...
CVE-2025-22227 vulnerabilities
Vulnerabilities for packages: flyway, apache-nifi, thingsboard, druid, opensearch...
CVE-2025-40924
Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a usually SHA-1 hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low entropy. The PID wil...