699 matches found
CVE-2022-49159
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement ref count for SRB The timeout handler and the done function are racing. When qla2x00asynciocbtimeout starts to run it can be preempted by the normal response path via the firmware?. qla24xxasyncgpscspdone...
CVE-2022-49719
CVE-2022-49719 affects the Linux kernel realview GIC implementation. The root cause is a refcount leak in realview_gic_of_init caused by of_find_matching_node_and_match() returning a node pointer with an incremented refcount without a corresponding of_node_put() when it is no longer needed. The f...
CVE-2022-49679
The CVE-2022-49679 entry concerns a Linux kernel ARM refcount leak in axxia_boot_secondary. The flaw arises because of_find_compatible_node() returns a node pointer with an incremented refcount and is not paired with a corresponding of_node_put(). The connected Astra Linux and Unity/OSV entries r...
CVE-2022-49482
In the Linux kernel, CVE-2022-49482 concerns the ASoC: mxs-saif driver. The root cause is a refcount leak where of_parse_phandle() returns a node pointer with an incremented refcount that is not released unless a corresponding of_node_put() is invoked when done. The documented fix is to call of_n...
CVE-2022-49397
CVE-2022-49397 affects the Linux kernel, in the phy: qcom-qmp driver. The vulnerability is a leak of a struct clk (pipe clock reference) on probe errors, including late probe error/deferral paths. The advisory states the fix releases the held pipe clock reference on such errors, i.e., a proper cl...
CVE-2022-49391 remoteproc: mtk_scp: Fix a potential double free
In the Linux kernel, the following vulnerability has been resolved: remoteproc: mtkscp: Fix a potential double free 'scp-rproc' is allocated using devmrprocalloc, so there is no need to free it explicitly in the remove function...
CVE-2024-47896
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
CVE-2024-12577
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...
CVE-2025-26618
Erlang is a programming language and runtime system for building massively scalable soft real-time systems with requirements on high availability. OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang. Packet si...
Important: Red Hat Security Advisory: postgresql security update
An update for postgresql is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
CVE-2024-52541
creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likeja4ipd2v 2025-02-19 19:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114032281469424192 2025-02-19 20:25:03+00:00| seen|...
Important: Red Hat Security Advisory: bind security update
An update for bind is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
CVE-2025-0805
CVE-2025-0805 involves the Mortgage Calculator / Loan Calculator WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) in the plugin’s mlcalc shortcode, arising from insufficient input sanitization and output escaping on user-supplied attributes. It affects all versions up to...
CVE-2022-41545
creationtimestamp| type| source ---|---|--- 2025-02-17 20:00:06+00:00| published-proof-of-concept| Telegram/Ydf82T2Ave2z1AxcCNu8KCRB4Pcaw9BskuZRRNndD8mBDwk 2025-02-18 18:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihukwjyfn2t 2025-02-19 16:21:33+00:00| seen|...
CVE-2025-23751 WordPress Data Dash plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Data Dash data-dash allows Reflected XSS.This issue affects Data Dash: from n/a through = 1.2.3...
CVE-2024-8266
creationtimestamp| type| source ---|---|--- 2025-02-13 01:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzjasfyr62g 2025-02-13 04:25:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhztsqqmjr2y 2025-02-13 04:36:57+00:00| seen|...
Important: container-tools:rhel8 security update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile CVE-2024-11218 For more details about the security...
@oberd/olive-middleware-koa (>=1.2.7 <=1.3.2), @ysdn/admin (>=1.0.0 <=1.0.2) +149 more potentially affected by CVE-2025-25200 via koa (>=0.0.1 <=0.21.0)
koa NPM version =0.0.1, =1.2.7, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.2.0 - bonojs =0.1.0 and more Source cves: CVE-2025-25200 Source advisory: OSV:GHSA-593F-38F6-JP5M...
CVE-2025-26377
creationtimestamp| type| source ---|---|--- 2025-02-12 14:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991465003892051 2025-02-12 15:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyhdz26zs2v 2025-02-12 15:37:02+00:00| seen|...