Linux Distros Unpatched Vulnerability : CVE-2017-0336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. Thi...

CVE-2025-54111

creationtimestamp| type| source ---|---|--- 2025-09-09 16:22:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0277 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review...

Advisory ROSA-SA-2025-2967

Software: avahi 0.7 OS: ROSA Virtualization 2.1 unaffected versions = avahi-0.7-27.0.2.rv3.1 affected versions avahi-0.7-27.0.2.2.rv3.1 CVE-ID: CVE-2018-1000845 BDU-ID: 2019-00693 CVE-Crit: CRITICAL. CVE-DESC: Duplicate CVE-2017-6519 CVE-STATUS: The vulnerability has been resolved CVE-REV: To clo...

PT-2025-36492

Name of the Vulnerable Software and Affected Versions: KioSoft "Stored Value" Unattended Payment Solutions affected versions not specified Description: KioSoft "Stored Value" Unattended Payment Solutions utilize vulnerable NFC cards. An attacker could potentially modify the balance on these cards...

PT-2025-36422

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 14.96.10 Frappe versions 15.0.0 through 15.71.0 Description An insecure endpoint parameter is susceptible to error-based SQL Injection due to a lack of validation. This allows for the retrieval of sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2025-9865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific ...

CVE-2011-0980

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:17+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:52+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

Linux Distros Unpatched Vulnerability : CVE-2018-14320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this...

Linux Distros Unpatched Vulnerability : CVE-2017-6961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to...

Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Linux Distros Unpatched Vulnerability : CVE-2022-49908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix memory leak in vhciwrite Syzkaller reports a memory leak as follows:...

CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of use race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress...

CVE-2025-8556

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange...

CVE-2025-6204

creationtimestamp| type| source ---|---|--- 2025-08-04 13:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlaz2cj7l2z 2025-09-03 14:41:29+00:00| seen| https://bsky.app/profile/sansisc.bsky.social/post/3lxwugt5mhc2s 2025-09-23 12:03:28+00:00| confirmed|...

PT-2025-31615 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The reported issue is a Cross-Site Request Forgery CSRF. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer...

RLSA-2025:3026 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

CVE-2025-54769

creationtimestamp| type| source ---|---|--- 2025-07-29 01:10:34+00:00| seen| https://bsky.app/profile/jimbecher.bsky.social/post/3lv2wdmsm4s2k 2025-07-29 02:54:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv344zkwjy2j 2025-07-30 21:00:04+00:00| published-proof-of-concept|...

CVE-2025-38488

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from cryptmessage, assuming all crypto operations are synchronous. However, when hardware crypto...

PT-2025-31140 · Undefined · Undefined

@CVEnew Interesting find! @BenjaminUs15, have you seen this CVE-2025-38493338498493 timerlat dump stack crash in the Linux kernel? Looks like a nasty one for tracing/osnoise users. Kernel panics are no joke...