CVE-2025-64431

creationtimestamp| type| source ---|---|--- 2025-11-07 21:15:54+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52yrhsvnsu2 2025-11-07 22:20:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m534esgqtm2n...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

AZL-69793 CVE-2025-64432 affecting package kubevirt for versions less than 1.5.3-2

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...

CLSA-2025-1762537354 cups: Fix of CVE-2024-35235

CVE-2024-35235: patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item...

Kubevirt 信任管理问题漏洞

Kubevirt is an open source virtual machine manager from KubeVirt. A trust management issue vulnerability exists in Kubevirt versions 1.5.3 and earlier and 1.6.0, which stems from the virt-api component failing to properly validate the CN field in a client's TLS certificate, which could lead to...

CVE-2025-27917

creationtimestamp| type| source ---|---|--- 2025-11-06 17:28:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115503931619214286...

xorg-x11-server-Xwayland update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Please update...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990132 advisory. In the Linux kernel, the following vulnerability has been resolved: dropmonitor: replace spinlock by rawspinlock tracedropcommon is called with preemption disabled,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988810 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpudmconnectoraddcommonmodes In...

Important: nvidia-kmod-common

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. CVE-2025-23280...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988694 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping in...

CVE-2025-41340

creationtimestamp| type| source ---|---|--- 2025-11-04 14:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4spe7jx4v2a 2025-11-04 15:35:41+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4suecmwwxd2...

CVE-2025-64110

creationtimestamp| type| source ---|---|--- 2025-11-04 12:39:54+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m4skkioyf22o 2025-11-05 02:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4txg66yw62s 2025-11-05 03:30:47+00:00| seen|...

CVE-2025-58317

creationtimestamp| type| source ---|---|--- 2025-11-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-03...

CVE-2025-12657

creationtimestamp| type| source ---|---|--- 2025-11-03 22:04:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qzn7frcv2s...

CVE-2025-50735

creationtimestamp| type| source ---|---|--- 2025-11-03 20:52:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115487746087659861 2025-11-03 21:36:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qy2z6uql2x...

CLSA-2025-1762192914 gnutls: Fix of CVE-2025-6395

CVE-2025-6395: fix NULL pointer dereference flaw in gnutlsfigurecommonciphersuite...

CLSA-2025-1762192315 gnutls: Fix of CVE-2025-6395

CVE-2025-6395: fix NULL pointer dereference flaw in gnutlsfigurecommonciphersuite...

Fedora: Security Advisory (FEDORA-2025-a77c1f005b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fixed the use of uninitialized device structures. In various probe functions, indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...