818 matches found
CGA-H46M-GPR2-3PF5
Bulletin has no description...
CVE-2025-38267
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...
UBUNTU-CVE-2025-38299
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMPDUMMY ETDM2INBE and ETDM1OUTBE are defined as COMPEMPTY, in the case the codec dainame will be null. Avoid a crash if the device tree is not assigning a codec to these links...
CVE-2025-38130
In the Linux kernel, the following vulnerability has been resolved: drm/connector: only call HDMI audio helper plugged cb if non-null On driver remove, sound/soc/codecs/hdmi-codec.c calls the pluggedcb with NULL as the callback function and codecdev, as seen in its hdmiremove function. The HDMI...
The vulnerability in the online business analytics web interface of IBM Cognos Analytics allows a perpetrator to execute arbitrary JavaScript code and expose account information.
The vulnerability of the online business analytics web interface of IBM Cognos Analytics relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and disclose user credentials...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, which stems from the lack of authentication, allows attackers to compromise the confidentiality of protected information.
The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...
CVE-2025-49825
Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch...
Weblate lacks rate limiting when verifying second factor
Impact The verification of the second factor was not subject to rate limiting. The absence of rate limiting on the second factor endpoint allows an attacker with valid credentials to automate OTP guessing. Patches This issue has been addressed in Weblate 5.12 via...
CGA-H7Q6-MHRJ-FV6V
Bulletin has no description...
CGA-48WJ-9WQJ-M9V5
Bulletin has no description...
CGA-X6C3-8JXC-J2XX
Bulletin has no description...
CVE-2025-31136
FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to run arbitrary JavaScript on the feeds page. This occurs by combining a cross-site scripting XSS issue that occurs in f.php when SVG favicons are downloaded from an attacker-controlled feed containing tags...
CVE-2025-5444
CVE-2025-5444 affects Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 (firmware 1.0.013.001–1.2.07.001). The vulnerability is in the function RP_UpgradeFWByBBS in /goform/RP_UpgradeFWByBBS, where manipulation of the argument type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw leads to OS command i...
Friday Squid Blogging: NGC 1068 Is the “Squid Galaxy”
I hadn't known that the NGC 1068 galaxy is nicknamed the "Squid Galaxy." It is, and it's spewing neutrinos without the usual accompanying gamma rays. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered...
MINI-MM5Q-QQ63-F9MQ
Bulletin has no description...
MINI-J8V3-9J5P-QQPV
Bulletin has no description...
MINI-5332-H24R-8749
Bulletin has no description...
MINI-4H72-Q8MG-G9MP
Bulletin has no description...