CVE-2025-53059

CVE-2025-53059 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools (OpenSearch Dashboards) with affected versions 8.60, 8.61, 8.62. The flaw enables a high-privileged attacker with network access via HTTP to compromise PeopleSoft PeopleTools and potentially obtain unauthorized access to ...

CVE-2025-53046

...

`tokio-tar` parses PAX extended headers incorrectly, allows file smuggling

The archive reader incorrectly handles PAX extended headers, when the ustar header incorrectly specifies zero size size=000000000000, while a PAX header specifies a non-zero size, tokio-tar::Archive is going to read the file content as tar entry header. This can be used by a tar file to present...

CVE-2025-7851

creationtimestamp| type| source ---|---|--- 2025-10-21 01:46:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3o7jd6gzz2o 2025-10-21 13:19:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115412353242186528 2025-10-23 11:33:46+00:00| seen|...

CVE-2025-11941

creationtimestamp| type| source ---|---|--- 2025-10-19 16:50:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3kr3ux5sn2o...

CVE-2025-61951

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/...

CVE-2025-61863

creationtimestamp| type| source ---|---|--- 2025-10-10 11:11:39+00:00| seen| Telegram/DWEwJfvlhbsrxGtVLQnTUYY3-mh2KTYPxQNWZYLbR9TSw...

io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-sqlserver-cdc (=3.2.0)

org.apache.flink:flink-connector-sqlserver-cdc MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-connector-sqlserver-cdc and may be impacted: - io.github.regychang:flinkify-flink-core =0.2.1, =0.2.2 Source cves...

AlmaLinux 10 : kernel (ALSA-2025:15662)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:15662 advisory. kernel: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 Tenable has extracted the preceding description block directl...

CVE-2025-36355

creationtimestamp| type| source ---|---|--- 2025-10-08 05:09:32+00:00| seen| https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m2nuscrci72c...

DEBIAN-CVE-2023-53678

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not initialized for some reason - in practice on platforms without display - suspending fbdev should be skipped during system suspend, fix this up. While at...

DEBIAN-CVE-2023-53630

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

DEBIAN-CVE-2023-53624

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfq: fix integer overflow of "credit" if schfq is configured with "initial quantum" having values greater than INTMAX, the first assignment of "credit" does signed integer overflow to a very negative value. In this...

CVE-2025-11347

creationtimestamp| type| source ---|---|--- 2025-10-07 07:44:36+00:00| seen| https://gist.github.com/Darkcrai86/a485c7534c386aaf7203669ac74b996d...

CVE-2025-9710

creationtimestamp| type| source ---|---|--- 2025-10-06 07:06:09+00:00| seen| Telegram/fycaqA5VMAiNF70xYu8Kt5rA6P-NZjEuOTT0i2mPraWKcs...

CVE-2025-58583

creationtimestamp| type| source ---|---|--- 2025-10-06 07:05:59+00:00| seen| Telegram/EuJ6XV1kroNghaOIgSFQXDlFqG7IioREDhcholnWR6pDe3s...

DEBIAN-CVE-2023-53552

In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915requests may be trapped by userspace inside a syncfile or dmabuf dma-resv and held indefinitely across different proceses. To counter-act t...

CVE-2022-50505

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix pci device refcount leak in pprnotifier As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

CVE-2022-50483

In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid buffer leaks on xdpdoredirect failure Before enetccleanrxringxdp calls xdpdoredirect, each software BD in the RX ring between index origi and i can have one of 2 refcount values on its page. We are the owner of...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...