CVE-2025-58084 Mattermost Desktop App crashes when clicking on malformed external URL

Mattermost Desktop App versions = 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL...

Arbitrary File Write

github.com/usememos/memos is vulnerable to arbitrary file write. The vulnerability is due to improper validation of file paths in the CreateResource endpoint when storing objects locally, which allows an attacker to create files with path traversal sequences and write arbitrary files on the serve...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

Online Hotel Reservation System addslideexec.php file arbitrary file upload vulnerability

Online Hotel Reservation System is an online hotel reservation system. Online Hotel Reservation System has an arbitrary file upload vulnerability that stems from a lack of valid validation of uploaded files by the parameter image in the file /admin/addslideexec.php. No details of the vulnerabilit...

The vulnerability of the mxm_wmi_call_mx() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mxmwmicallmx function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the ext4_fc_record_regions() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4fcrecordregions function in the Linux operating system leads to errors when releasing resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ext4_get_group_info() function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4getgroupinfo function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux kernel is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the crypto/xts.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the crypto/xts.c module of the Linux operating system is related to improper management of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the put_pasid_state() function in the drivers/iommu/amd/iommu_v2.c file of the Linux kernel’s IOMMU driver allows a hacker to trigger a service failure.

The vulnerability of the putpasidstate function in the drivers/iommu/amd/iommuv2.c file of the Linux kernel’s IOMMU driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the get_default_font() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the getdefaultfont function in the Linux operating system’s kernel is related to an incorrect bitwise shift of a integer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the arm_smmu_pmu_init() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the armsmmupmuinit function in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver module/driver/infiniband/hw/hfi1/chip.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/infiniband/hw/hfi1/chip.c module of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `radeon_atrm_get_bios()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the radeonatrmgetbios function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hpd_rx_irq_create_workqueue() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hpdrxirqcreateworkqueue function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux Distros Unpatched Vulnerability : CVE-2023-53619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: conntrack: Avoid nfcthelperhash uses after free If nfconntrackinitstart fails for example due to a registernfconntrackbpf failure, the...

CVE-2025-2140 IBM Engineering Requirements Management Doors Next spoofing

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data...

RHEL 9 : kernel (RHSA-2025:17734)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17734 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netsched: hfsc: Fix a potenti...

RHEL 9 : kernel-rt (RHSA-2025:17735)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17735 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...