42578 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-40755
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jasimage.c. CVE-2022-40755 Note that Nessus relies o...
Linux Distros Unpatched Vulnerability : CVE-2023-3904
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE affecting all versions starting before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting fr...
Integer Overflow to Buffer Overflow
Overview Affected versions of this package are vulnerable to Integer Overflow to Buffer Overflow via the BMPv3 Palette Decoding functionality. An attacker can execute arbitrary code by tricking a user into opening a specially crafted .bmp file, which triggers an integer overflow and subsequent...
SAIL Image Decoding Library PSD Image Decoding integer overflow vulnerability
Talos Vulnerability Report TALOS-2025-2218 SAIL Image Decoding Library PSD Image Decoding integer overflow vulnerability August 25, 2025 CVE Number CVE-2025-53510 SUMMARY A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. Wh...
The Biosig Project libbiosig ABF parsing integer overflow to heap-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2025-2231 The Biosig Project libbiosig ABF parsing integer overflow to heap-based buffer overflow vulnerability August 25, 2025 CVE Number CVE-2025-53518 SUMMARY An integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project...
CVE-2025-38647
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: sar: drop lockdep assertion in rtw89setsarfromacpi The following assertion is triggered on the rtw89 driver startup. It looks meaningless to hold wiphy lock on the early init stage so drop the assertion. WARNING: CPU...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 11, 2025 to August 17, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through September 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
PT-2025-33798 · Mt76 +1 · Mt76 +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The mt7925 mcu hw scan function in the mt76 module contains an off-by-one error. This occurs because the comparison operator used to check array bounds is incorrect, potentially leadin...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 4, 2025 to August 10, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through September 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
CVE-2025-53784
creationtimestamp| type| source ---|---|--- 2025-08-12 16:01:32+00:00| seen| https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review 2025-08-12 17:21:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115016943578757951 2025-08-13 11:25:06+00:00| seen|...
curl: Vulnerability Report: Local File Disclosure via file:// Protocol in cURL
Summary A security vulnerability has been identified that allows unauthorized local file system access via the file:// protocol in cURL, particularly when executed with elevated privileges e.g., sudo. This could lead to sensitive data exposure, including password hashes stored in /etc/shadow. Ste...
Linux Distros Unpatched Vulnerability : CVE-2021-47150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fecenetinit If the memory allocated for cbdbase i...
CVE-2025-53767
creationtimestamp| type| source ---|---|--- 2025-08-07 22:35:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtsduj6lj26 2025-08-08 03:01:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvub72hxzp2u 2025-08-08 03:46:28+00:00| seen|...
CVE-2023-41528
creationtimestamp| type| source ---|---|--- 2025-08-07 21:59:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtqdcghnl2e...
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 28, 2025 to August 3, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through September 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
CVE-2025-46414
creationtimestamp| type| source ---|---|--- 2025-08-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-07 2025-08-07 16:02:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvt4ekj5qa2q 2025-08-08 20:13:14+00:00| seen|...
CVE-2025-52586
creationtimestamp| type| source ---|---|--- 2025-08-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-07 2025-08-07 16:02:21+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvt4ekj5qa2q...