9437 matches found
CVE-2025-38145
In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeedlpcenablesnoop devmkasprintf returns NULL when memory allocation fails. Currently, aspeedlpcenablesnoop does not check for this case, which results in a NULL pointer dereference. Add NULL chec...
CVE-2025-38113
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...
CVE-2025-38167
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdrfirstde return value The hdrfirstde function returns a pointer to a struct NTFSDE. This pointer may be NULL. To handle the NULL error effectively, it is important to implement an error handler. This will help...
CVE-2025-38159 wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtwfwbtwificontrolrtwdev, para0, ¶1', which reads 5 bytes: void rtwfwbtwificontrolstruct...
CVE-2025-38137
In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger use-after-free here by: a forcing rescanworkfunc to take a long time and b utilizing a pwrctrl driver that may be unloaded for some reason...
CVE-2025-38106
In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...
CVE-2025-38103
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhidparse Update struct hiddescriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently...
CVE-2025-52837
creationtimestamp| type| source ---|---|--- 2025-07-03 01:19:51+00:00| seen| https://bsky.app/profile/kdm.pw/post/3lszkqcpne22k 2025-07-03 06:31:55+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lt246bjqfs2h 2025-07-03 09:40:24+00:00| seen|...
PT-2025-27780 · Endress+Hauser · Endress+Hauser Meac300-Fnade4
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue arises from the application's behavior of returning different error messages for failed login attempts, depending on whether the failure was due to an incorrect password or a...
CVE-2025-43025
creationtimestamp| type| source ---|---|--- 2025-07-02 21:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz5cu5ew22v...
CVE-2025-45424
creationtimestamp| type| source ---|---|--- 2025-07-02 21:05:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4jegvkf2r...
CVE-2025-34075
A virtual machine escape vector has been discovered in HashiCorp Vagrant. By design, Vagrant automatically mounts the host system’s project directory into the guest VM under /vagrant. This includes the Vagrantfile configuration file, which is a Ruby script evaluated by the host every time a vagra...
CVE-2025-53492
creationtimestamp| type| source ---|---|--- 2025-07-02 17:39:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyqyob2yi2q...
CVE-2025-52891
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xml, and at least...
CVE-2025-38091
creationtimestamp| type| source ---|---|--- 2025-07-02 17:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsyp75rak52p 2025-07-23 01:14:59+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lultrwme4c2p 2026-03-19 00:00:00+00:00| seen|...
CVE-2025-53109
Model Context Protocol Servers is a collection of reference implementations for the model context protocol MCP. Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01...
CVE-2025-38091
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get planeid Why & How Fix a false positive warning which occurs due to lack of correct checks when querying planeid in DML21. This fixes the warning when performing a mode1 reset...
CVE-2025-38001
creationtimestamp| type| source ---|---|--- 2025-07-02 11:47:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsy5d6hjlk2d 2025-07-02 15:38:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsykbblxm22d 2025-07-12 03:00:05+00:00|...
CVE-2025-52462
creationtimestamp| type| source ---|---|--- 2025-07-02 09:06:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxueftojw2r 2025-07-06 20:55:49+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3ltd5tu7zpk2u...