Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a proc entry removal warning during network cleanup by the ipvs application, which could lead to a memory le...

CVE-2024-9771

creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxi3rc62h 2025-04-28 09:52:50+00:00| seen| https://t.me/cvedetector/23886 2025-04-28 17:10:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13707...

CVE-2025-3973

creationtimestamp| type| source ---|---|--- 2025-04-27 15:11:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13622 2025-04-27 15:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnslbpylhh2u 2025-04-27 17:01:02+00:00| published-proof-of-concept|...

CVE-2025-32986

creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13532 2025-04-25 23:20:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedg2hzl2b 2025-04-26 01:52:34+00:00| seen| https://t.me/cvedetector/23787 2025-04-28...

CVE-2025-43859

creationtimestamp| type| source ---|---|--- 2025-04-24 19:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114394512917622666 2025-04-24 21:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114395140063306383 2025-04-24 22:24:48+00:00| seen|...

CVE-2025-3840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

An improper neutralization of input vulnerability was identified in the End of Life EOL OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. An...

CVE-2025-3818

A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB.processinsertquery of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3826

creationtimestamp| type| source ---|---|--- 2025-04-20 14:13:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnath6uzy3a2 2025-04-20 14:49:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnavicfewk2l 2025-04-20...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

SUSE CVE-2025-37785

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with reclen == block size results in out-of-bounds read later on, when the corrupted directory is removed...

Improper Input Validation

org.apache.poi:poi-ooxml is vulnerable to Improper Input validation. The vulnerability is due to improper input validation due to the lack of checks for duplicate ZIP entry names in OOXML files, which can lead to inconsistent parsing behavior across different products...

CVE-2024-29643

creationtimestamp| type| source ---|---|--- 2025-04-18 14:55:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uuv2hm5l2...

CVE-2025-39989

In the Linux kernel, the following vulnerability has been resolved: x86/mce: use iscopyfromuser to determine copy-from-user context Patch series "mm/hwpoison: Fix regressions in memory failure handling", v4. 1. What am I trying to do: This patchset resolves two critical regressions related to...

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

AZL-61475 CVE-2025-37785 affecting package kernel for versions less than 6.6.92.2-1

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with reclen == block size results in out-of-bounds read later on, when the corrupted directory is removed...

DEBIAN-CVE-2025-37785

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with reclen == block size results in out-of-bounds read later on, when the corrupted directory is removed...

UBUNTU-CVE-2025-37785

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with reclen == block size results in out-of-bounds read later on, when the corrupted directory is removed...

CVE-2025-37785 ext4: fix OOB read when checking dotdot dir

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with reclen == block size results in out-of-bounds read later on, when the corrupted directory is removed...

CVE-2025-29461

An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path...

CVE-2025-22060

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached shadow SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly accessed by configuring an...