CVE-2025-40050

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPFNEG if dst is a pointer In checkaluop, the verifier currently calls checkregarg and adjustscalarminmaxvals unconditionally for BPFNEG operations. However, if the destination register holds a...

Fedora: Security Advisory (FEDORA-2025-cf4f628312)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-55752

creationtimestamp| type| source ---|---|--- 2025-10-27 17:51:36+00:00| seen| https://seclists.org/oss-sec/2025/q4/75 2025-10-27 19:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m474q3zn6m23 2025-10-27 19:28:14+00:00| seen|...

CVE-2025-12210

creationtimestamp| type| source ---|---|--- 2025-10-27 04:31:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45lkfr2io2o...

K000157114: cPython vulnerability CVE-2025-4517

Security Advisory Description Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter...

SUSE-SU-2025:20872-1 Security update for haproxy

This update for haproxy fixes the following issues: - CVE-2025-11230: Fixed mjson JSON decoder excessive resource consumption bsc1250983...

CVE-2025-10705

creationtimestamp| type| source ---|---|--- 2025-10-23 14:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3umda5j2n2u...

CVE-2025-60341

creationtimestamp| type| source ---|---|--- 2025-10-22 17:51:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115419084710628503 2025-10-22 21:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3sr2vqqlb2c...

DEBIAN-CVE-2023-53719

In the Linux kernel, the following vulnerability has been resolved: serial: arcuart: fix ofiomap leak in arcserialprobe Smatch reports: drivers/tty/serial/arcuart.c:631 arcserialprobe warn: 'port-membase' from ofiomap not released on lines: 631. In arcserialprobe, if uartaddoneport fails,...

CVE-2025-62587

...

CVE-2025-62287

CVE-2025-62287 affects Oracle Life Sciences InForm (Web Server) in Oracle Health Sciences Applications, affected version 7.0.1.0. The vulnerability allows unauthenticated network access via HTTP to compromise InForm, with attacks requiring user interaction from a non-attacker. Impact may include ...

CVE-2025-61754

...

CVE-2025-53061

The CVE-2025-53061 entry concerns Oracle PeopleSoft’s PeopleTools (PIA Core Technology) with affected versions 8.60, 8.61 and 8.62. Documents consistently describe an easily exploitable vulnerability that allows a high-privilege attacker, over HTTP with network access, to perform unauthorized upd...

CVE-2018-25118

creationtimestamp| type| source ---|---|--- 2025-10-20 22:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nsw45at32o 2025-10-23 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb24xsxs2w 2025-11-15 00:00:00+00:00| seen| The Shadowserver...

SUSE: Security Advisory (SUSE-SU-2025:03628-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-62171

ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating...

MalCVE: Malware Detection and CVE Association Using Large Language Models

Malicious software attacks are having an increasingly significant economic impact. Commercial malware detection software can be costly, and tools that attribute malware to the specific software vulnerabilities it exploits are largely lacking. Understanding the connection between malware and the...

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

DEBIAN-CVE-2025-39992

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unusemm called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL...

DEBIAN-CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...