DEBIAN-CVE-2025-15272

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

BELL-CVE-2023-54312

Bulletin has no description...

BELL-CVE-2023-54225

Bulletin has no description...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-993135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993135 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery wor...

CVE-2025-69210

creationtimestamp| type| source ---|---|--- 2025-12-30 22:32:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbafsip47o2y 2026-01-24 22:44:08+00:00| seen| https://gist.github.com/alon710/2bc831a1f1b0ddaa3266a9700f8e1112 2026-04-29 07:21:08+00:00| seen|...

CVE-2025-65411

creationtimestamp| type| source ---|---|--- 2025-12-30 22:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbaf7mkmkv2y 2026-01-02 21:53:17+00:00| seen| Telegram/JxPXMxRS9I7Z3kYw2DwOkNmPXjWNfhlFmYgdz0OY1MqXE...

CVE-2023-54260

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

UBUNTU-CVE-2023-54280

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in treeconnectdfstarget. Als...

DEBIAN-CVE-2022-50852

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix use after free in mt7921acpiread Don't dereference "sarroot" after it has been freed...

CVE-2023-54280

CVE-2023-54280 affects the Linux kernel and concerns a race condition in CIFS when building IPC trees. The patch fixes a use-after-free in __tree_connect_dfs_target() by protecting access to TCP_Server_Info.hostname during IPC tree name construction and updating IPC tcon state on success to avoid...

CVE-2023-54260

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly return, then the connection info will be leaked. Let's set the smb...

CVE-2025-53627

creationtimestamp| type| source ---|---|--- 2025-12-29 18:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5irhmoa32u...

CVE-2025-15182

creationtimestamp| type| source ---|---|--- 2025-12-29 12:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4sq7ubr72e...

CVE-2025-15065

creationtimestamp| type| source ---|---|--- 2025-12-29 01:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3q2nez3b2o...

CVE-2025-15154

creationtimestamp| type| source ---|---|--- 2025-12-29 00:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3lt75y4w2y...

CVE-2025-15125 JeecgBoot queryDepartPermission improper authorization

A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file /sys/permission/queryDepartPermission. The manipulation of the argument departId results in improper authorization. The attack can be launched remotely. This attack is...

BELL-CVE-2025-68748

Bulletin has no description...

BELL-CVE-2023-54047

Bulletin has no description...

BELL-CVE-2023-54017

Bulletin has no description...

CVE-2025-54322

XSpeeder SXZOS firmware (CVE-2025-54322) is affected. The vulnerability resides in the Django-based web interface where unsafe use of Python eval() on base64-decoded input from the chkid parameter (along with title and oIP) enables unauthenticated remote code execution with root privileges. Affec...