14727 matches found
CVE-2025-61661
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
CVE-2025-61661 Grub2: grub2: out-of-bounds write via malicious usb device
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
CVE-2025-61661
CVE-2025-61661 affects the GRUB2 bootloader. The vulnerability stems from the USB string conversion handling, allowing a local attacker with a malicious USB device connected during boot to trigger inconsistent length values, potentially crashing GRUB (DoS) and possibly causing data corruption (im...
CVE-2025-61661
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
This Week in Spring - November 18th, 2025
This Week in Spring - November 18th, 2025 Hi, Spring fans! I'm thrilled to be in New York City for an exciting week of joint presentations on Spring AI + Bedrock and Spring Boot with the legendary James Ward. First up: we'll present a workshop at the AI Native Dev Conf today, then speak at the...
OpenTelemetry with Spring Boot
This is a new blog post in the Road to GA series, and this time we're taking a look at OpenTelemetry with Spring Boot. Introduction In modern cloud native architectures, observability is no longer optional; it is a fundamental requirement. You want to understand what your application is doing via...
PT-2025-47379
Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A flaw exists in the GRUB bootloader due to improper handling of string conversion when processing information from a USB device. Specifically, the bootloader is susceptible to inconsistent leng...
GNU GRUB security vulnerability
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that originates from incorrectly retaining memory pointers during file closure, which could lead to a denial of service...
HPE Aruba Networking AOS-CX security vulnerabilities
HPE Aruba Networking AOS-CX is a series of switch devices from HPE America. A security vulnerability exists in the HPE Aruba Networking AOS-CX that stems from a platform-level denial-of-service vulnerability that could cause the switch to fail to boot...
November 18, 2025—KB5072359 (OS Build 26100.7178) Out-of-band
None None...
Linux Distros Unpatched Vulnerability : CVE-2025-61661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when...
kernel: of_numa: fix uninitialized memory nodes causing kernel panic
A flaw was found in the linux kernel ofnuma subsystem fails to properly initialize memory‑only NUMA nodes i.e., nodes without CPUs. When such nodes remain uninitialized, a subsequent call to freeareainit may access NODEDATA for those nodes and trigger a kernel panic due to a NULL pointer...
kernel: of_numa: fix uninitialized memory nodes causing kernel panic
A flaw was found in the linux kernel ofnuma subsystem fails to properly initialize memory‑only NUMA nodes i.e., nodes without CPUs. When such nodes remain uninitialized, a subsequent call to freeareainit may access NODEDATA for those nodes and trigger a kernel panic due to a NULL pointer...
io.github.wwwlike:vlife-boot-starter-web (>=1.0.4, <=1.0.7), io.github.wwwlike:vlife-core (>=1.0.4, <=1.0.7) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (>=1.0.4, <=1.0.7)
io.github.wwwlike:vlife-base MAVEN version =1.0.4, =1.0.4, =1.0.4, =1.0.4, =1.0.2, =1.0.7 Source cves: CVE-2025-13266 Source advisory: SNYK:JAVA-IOGITHUBWWWLIKE-14038399...
io.github.wwwlike:vlife-boot-starter-web (1.0.5), io.github.wwwlike:vlife-core (1.0.5) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.5)
io.github.wwwlike:vlife-base MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.5 - io.github.wwwlike:vlife-core 1.0.5 -...
io.github.wwwlike:vlife-boot-starter-web (1.0.6), io.github.wwwlike:vlife-core (1.0.6) +1 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.6)
io.github.wwwlike:vlife-base MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.6 - io.github.wwwlike:vlife-core 1.0.6 -...
io.github.wwwlike:vlife-boot-starter-web (1.0.7), io.github.wwwlike:vlife-core (1.0.7) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.7)
io.github.wwwlike:vlife-base MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.7 - io.github.wwwlike:vlife-core 1.0.7 -...
io.github.wwwlike:vlife-boot-starter-web (1.0.4), io.github.wwwlike:vlife-core (1.0.4) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.4)
io.github.wwwlike:vlife-base MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.4 - io.github.wwwlike:vlife-core 1.0.4 -...
PT-2025-51648
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nouveau firmware component of the Linux kernel. Specifically, memory allocated for nvkm falcon fw::boot is not deallocated, leading to a kernel memory leak...
