PT-2025-37703

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was discovered in the Linux kernel related to scheduling during atomic operations within the decompression path of the f2fs filesystem. The issue involves potential scheduling...

scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE

...

DEBIAN-CVE-2025-39788

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCIUTRLNEXUSTYPE On Google gs101, the number of UTP transfer request slots nutrs is 32, and in this case the driver ends up programming the UTRLNEXUSTYPE incorrectly as 0. This is because the...

Linux Distros Unpatched Vulnerability : CVE-2025-29485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allows attackers to cause a Denial of Service...

Linux Distros Unpatched Vulnerability : CVE-2025-26311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory leaks have been identified in the clip actions parsing functions parseSWFCLIPACTIONS and parseSWFCLIPACTIONRECORD in util/parser.c of libming...

Linux Distros Unpatched Vulnerability : CVE-2019-12980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Ming aka libming 0.4.8, there is an integer overflow caused by an out-of-range left shift in the SWFInputreadSBits function in blocks/input.c. Remote attacke...

Linux Distros Unpatched Vulnerability : CVE-2025-26307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak has been identified in the parseSWFIMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2024-24148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak issue discovered in parseSWFFREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. CVE-2024-24148...

Linux Distros Unpatched Vulnerability : CVE-2018-9132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denia...

Linux Distros Unpatched Vulnerability : CVE-2025-26308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak has been identified in the parseSWFFILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via...

Linux Distros Unpatched Vulnerability : CVE-2018-8962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to...

Linux Distros Unpatched Vulnerability : CVE-2018-8964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of...

CVE-2025-48105

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vincent Boiardt Easy Flash Embed easy-flash-embed allows Stored XSS.This issue affects Easy Flash Embed: from n/a through = 1.0...

CVE-2025-39731

In the Linux kernel, the following vulnerability has been resolved: f2fs: vmunmapram may be called from an invalid context When testing F2FS with xfstests using UFS backed virtual disks the kernel complains sometimes that f2fsreleasedecompmem calls vmunmapram from an invalid context. Example trac...

CVE-2025-39731

CVE-2025-39731 concerns the Linux kernel, specifically the F2FS file system, where vm_unmap_ram() may be invoked from an invalid context. The connected documents confirm a patch that changes the in_task() check inside f2fs_read_end_io() to also verify that interrupts are disabled, ensuring pages ...

DEBIAN-CVE-2025-39674

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

CVE-2025-48105

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vincent Boiardt Easy Flash Embed easy-flash-embed allows Stored XSS.This issue affects Easy Flash Embed: from n/a through = 1.0...

CVE-2025-48105 WordPress Easy Flash Embed plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vincent Boiardt Easy Flash Embed easy-flash-embed allows Stored XSS.This issue affects Easy Flash Embed: from n/a through = 1.0...

CVE-2025-48105 WordPress Easy Flash Embed plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vincent Boiardt Easy Flash Embed easy-flash-embed allows Stored XSS.This issue affects Easy Flash Embed: from n/a through = 1.0...

CVE-2025-48105

CVE-2025-48105 is a stored XSS vulnerability in the WordPress plugin Easy Flash Embed (versions up to 1.0). The root cause is improper input neutralization during web page generation, enabling stored Cross-Site Scripting. Public sources in the connected set (NVD/Red Hat/CVE lists and PatchStack e...