5592 matches found
CVE-2025-58434 Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker...
CVE-2025-43725
Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
SUSE CVE-2025-39770
In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6CSUM When performing Generic Segmentation Offload GSO on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the...
DEBIAN-CVE-2025-39770
In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6CSUM When performing Generic Segmentation Offload GSO on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the...
UBUNTU-CVE-2025-39770
In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6CSUM When performing Generic Segmentation Offload GSO on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the...
CVE-2025-39770 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6CSUM When performing Generic Segmentation Offload GSO on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the...
CVE-2023-7042 vulnerabilities
Vulnerabilities for packages: linux-aws-generic, linux-qemu-generic, linux-azure-generic, linux-gcp, linux-gcp-generic, linux-vmware-generic, linux-azure, linux-qemu, linux-aws, linux-vmware, linux-qemu-rc...
CVE-2024-0193 vulnerabilities
Vulnerabilities for packages: linux-aws-generic, linux-qemu-generic, linux-azure-generic, linux-gcp, linux-gcp-generic, linux-vmware-generic, linux-azure, linux-qemu, linux-aws, linux-vmware, linux-qemu-rc...
GHSA-52X7-WCQQ-WFJP vulnerabilities
Vulnerabilities for packages: linux-aws-generic, linux-qemu-generic, linux-azure-generic, linux-gcp, linux-gcp-generic, linux-vmware-generic, linux-azure, linux-qemu, linux-aws, linux-vmware, linux-qemu-rc...
GHSA-VCF9-7QJV-G6Q4 vulnerabilities
Vulnerabilities for packages: linux-aws-generic, linux-qemu-generic, linux-azure-generic, linux-gcp, linux-gcp-generic, linux-vmware-generic, linux-azure, linux-qemu, linux-aws, linux-vmware, linux-qemu-rc...
CVE-2025-43725
Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-43725
Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-43725
Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-43725
Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
PT-2025-37066
Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager, Generic Application Agent versions 19.19 and 19.20 Description: Dell PowerProtect Data Manager, Generic Application Agent contains an Incorrect Default Permissions issue. A low privileged attacker with local...
PT-2025-44098
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the pinctrl subsystem where the return value of the pinmux ops::get function name function is not adequately checked. The pinmux generic get function...
OESA-2025-2125 krb5 security update
Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due ...
CVE-2025-38718 sctp: linearize cloned gso packets in sctp_rcv
In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctprcv A cloned head skb still shares these frag skbs in fraglist with the original head skb. It's not safe to access these frag skbs. syzbot reported two use-of-uninitialized-memory bugs...
