DEBIAN-CVE-2022-49730

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...

DEBIAN-CVE-2022-49604

In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctlipfwdusepmtu. While reading sysctlipfwdusepmtu, it can be changed concurrently. Thus, we need to add READONCE to its readers...

AZL-58986 CVE-2022-49535 affecting package kernel for versions less than 5.15.182.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfcissueelsflogi fails and returns non-zero status, the node reference count is decremented to trigger the release of the nodelist structure...

DEBIAN-CVE-2022-49477

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: Fix refcount leak in ariesaudioprobe ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when done. If extconfindedevbynode fails, it doesn't call ofnodeput Calling...

CVE-2022-49524

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the dmasetmask, the driver will get the following splat: 55.853884 BUG: KASAN: use-after-free in processremoveddriver+0x3c/0x240 55.85448...

UBUNTU-CVE-2022-49604

In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctlipfwdusepmtu. While reading sysctlipfwdusepmtu, it can be changed concurrently. Thus, we need to add READONCE to its readers...

CVE-2022-49730 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...

Dante Discovery Detection (Windows)

Binary data dantediscoverywininstalled.nbin...

PT-2025-19688 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: libdwg affected versions not specified Description: The software is susceptible to an index-out-of-bounds issue discovered through OSS-Fuzz testing. The crash occurs during the processing of .dwg files, specifically within the dwg decode eed,...

CVE-2025-25794

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...

GHSA-5R85-6H7F-RG3R Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

CVE-2025-26527

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

UBUNTU-CVE-2025-26527

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

CVE-2025-26527

CVE-2025-26527 concerns Moodle: non-searchable tags can be discovered by users via the tag search page or the tags block. Multiple connected sources (BIT-MOODLE-2025-26527, GHSA/GHSA-5R85-6H7F-RG3R, OSV entries) corroborate the tag exposure issue. The initial description states the risk clearly, ...

CVE-2024-12918

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5189 2025-02-24 17:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114060119765999360 2025-02-24 19:32:23+00:00| seen|...

WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Estatik versions = 4.3.0...

WordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin System Dashboard versions = 2.8.18...

Friday Squid Blogging: New Squid Fossil

A 450-million-year-old squid fossil was dug up in upstate New York. Blog moderation policy...

WordPress Legoeso PDF Manager plugin <= 1.2.2 - Authenticated (Author+) SQL Injection via checkedVals Parameter vulnerability

Authenticated Author+ SQL Injection via checkedVals Parameter vulnerability discovered by WordFence in WordPress Plugin Legoeso PDF Manager versions = 1.2.2...