318 matches found
CVE-2023-40610
Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL stateme...
CVE-2025-1479
An open debug interface was reported in the Legion Space software included on certain Legion devices that could allow a local attacker to execute arbitrary code...
CVE-2023-54134
In the Linux kernel, the following vulnerability has been resolved: autofs: fix memory leak of waitqueues in autofscatatonicmode Syzkaller reports a memory leak: BUG: memory leak unreferenced object 0xffff88810b279e00 size 96: comm "syz-executor399", pid 3631, jiffies 4294964921 age 23.870s hex...
CGA-48G7-HQRH-88PX
Bulletin has no description...
CVE-2025-68320
In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The following warning was seen when we try to connect using ssh to the device. BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575 inatomic: 1, irqsdisabled: 0,...
CVE-2023-2734
creationtimestamp| type| source ---|---|--- 2025-11-30 13:09:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-2734.yaml 2025-12-01 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4wo3z2j...
CVE-2025-61784
creationtimestamp| type| source ---|---|--- 2025-10-07 22:08:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-527m-2xhr-j27g...
CVE-2023-41531
creationtimestamp| type| source ---|---|--- 2025-08-07 22:14:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtr67aqa32k 2025-11-13 19:20:33+00:00| seen| https://gist.github.com/celbahraoui-chaima/3a343f00647d901c093c90966fd91fe6...
CVE-2025-51055
creationtimestamp| type| source ---|---|--- 2025-08-07 18:39:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtf6e5esj2s...
CVE-2025-48172
creationtimestamp| type| source ---|---|--- 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...
CVE-2025-48530
creationtimestamp| type| source ---|---|--- 2025-08-05 10:46:42+00:00| seen| https://t.me/UzbeHackers/2537 2025-08-05 15:17:56+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lvnyswpjs3k2 2025-08-05 15:40:46+00:00| seen|...
CVE-2024-58265
The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery...
CVE-2025-38406
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARNON doesn't add any value. Additionally, this is one of the top syzbot...
CVE-2025-51482
creationtimestamp| type| source ---|---|--- 2025-07-22 18:56:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lul6nbngu227 2025-08-01 03:00:09+00:00| published-proof-of-concept| Telegram/y7-RpDrmSuXhLcSTuW0R9s09Quezx-GrdrSmzgmffhhoeQ 2025-10-26 21:02:29+00:00| seen|...
CVE-2025-7867
creationtimestamp| type| source ---|---|--- 2025-07-20 09:00:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luf4ewo7uc2o...
CVE-2025-50066
CVE-2025-50066 affects the Oracle Database Server’s Materialized View component. Affected versions are 19.3–19.27, 21.3–21.18, and 23.4–23.8. An attacker with Execute on DBMS_REDEFINITION and network access via Oracle Net can exploit this to gain unauthorized update/insert/delete access to data i...
CVE-2024-42646
A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service DoS via crafted messages...
CVE-2025-38314
In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...
CVE-2025-38311
In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the error prone logic of trylocks. Thanks to netdevlock by Jakub it is now easy, and in most cases we were protected by it already - replace crit lock by...
