33985 matches found
CVE-2025-40216
CVE-2025-40216 affects the Linux kernel io_uring/rsrc path: the calculation of the offset for the first page into a folio after coalescing relied on an alignment mask despite no guaranteed user-vaddr alignment. The issue is resolved in updated kernel releases (e.g., SUSE-SU-2026:2800-1 and relate...
CVE-2025-40216
In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...
Exploit for Prototype Pollution in Datatables Datatables.Net
CVE-2020-28458 Affected versions of this package are vulnerabl...
Insecure Direct Object Reference (IDOR)
com.liferay, com.liferay.change.tracking.web is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to improper access control on the AccountEntriesAdminPortlet’s addressId parameter, which allows an attacker to access addresses belonging to other accounts by manipulatin...
CVE-2025-54326
An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the Camera device driver can lead to a NULL pointer dereference, resulting in a denial of service...
Thermo Fisher Torrent Suite Django application 安全漏洞
Thermo Fisher Torrent Suite Django application is a core software component of Thermo Fisher USA. A security vulnerability exists in Thermo Fisher Torrent Suite Django application version 5.18.1, which originates in the LocalhostAuthMiddleware middleware that performs automated authentication to ...
Debian dsa-6069 : openvpn - security update
The remote Debian 12 / 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6069 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6069-1 [email protected] https://www.debian.org/security/...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unverified user virtual address alignment, which could lead to memory access errors...
PT-2025-49171
Name of the Vulnerable Software and Affected Versions youlaitech youlai-mall versions 1.0.0 through 2.0.0 Description A flaw exists in youlaitech youlai-mall versions 1.0.0 through 2.0.0 related to improper control of dynamically-identified variables. The issue is present in the getById,...
CVE-2025-66373
creationtimestamp| type| source ---|---|--- 2025-12-03 23:07:17+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3m74l525ixj2w 2025-12-04 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76nxfvi372j 2025-12-14 13:18:27+00:00| seen|...
[SECURITY] [DSA 6069-1] openvpn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6069-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 03, 2025 https://www.debian.org/security/faq -...
CVE-2025-13086
OpenVPN CVE-2025-13086 involves improper validation of source IP addresses in OpenVPN versions 2.6.0–2.6.15 and 2.7_alpha1–2.7_rc1, allowing a remote attacker to initiate a session from an IP address that did not start the connection, leading to a denial of service for the originating client. Con...
CVE-2025-13086
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...
CVE-2025-13086
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...
CVE-2025-13086
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...
CVE-2025-13086
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...
CVE-2025-54326
An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the Camera device driver can lead to a NULL pointer dereference, resulting in a denial of service...
GHSA-F469-JH82-97FV
creationtimestamp| type| source ---|---|--- 2025-12-03 17:12:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115656748477885093...