9517 matches found
CVE-2025-25761
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...
CVE-2025-21778
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reservemem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 PF: supervisor read...
CVE-2022-49581
In the Linux kernel, the following vulnerability has been resolved: be2net: Fix buffer overflow in begetmoduleeeprom becmdreadporttransceiverdata assumes that it is given a buffer that is at least PAGEDATALEN long, or twice that if the module supports SFF 8472. However, this is not always the...
CVE-2025-26975
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Strong Testimonials: from n/a through = 3.2.3...
CVE-2025-21757
No description is available for this CVE...
CVE-2025-26905
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Estatik Estatik estatik allows PHP Local File Inclusion.This issue affects Estatik: from n/a through = 4.3.1...
CVE-2025-25760
creationtimestamp| type| source ---|---|--- 2025-02-27 14:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5678 2025-02-27 17:53:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjgeobr2y 2025-02-27 19:15:59+00:00| seen|...
CVE-2025-1738
creationtimestamp| type| source ---|---|--- 2025-02-27 13:27:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5673 2025-02-27 15:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asjgo6a2v 2025-02-27 16:45:11+00:00| seen| https://t.me/cvedetector/19044 2025-08-22...
CVE-2025-1693
creationtimestamp| type| source ---|---|--- 2025-02-27 13:27:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5674 2025-02-27 15:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asiolgd22 2025-02-27 16:45:10+00:00| seen| https://t.me/cvedetector/19043...
CVE-2024-57953
In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fix integer overflow on 32bit systems The problem is this multiply in tps6594rtcsetoffset tmp = offset TICKSPERHOUR; The "tmp" variable is an s64 but "offset" is a long in the -277774-277774 range. On 32bit systems ...
CVE-2024-57974
In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address change and rehash If a UDP socket changes its local address while it's receiving datagrams, as a result of connect, there is a period during which a lookup operation might fail to fi...
CVE-2024-52560
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Mark inode as bad as soon as error detected in mienumattr Extended the mienumattr function interface with an additional parameter, struct ntfsinode ni, to allow marking the inode as bad as soon as an error is detected...
CVE-2022-49708
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon ext4mbuseinodepa Hulk Robot reported a BUGON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! ... RIP: 0010:ext4mbmarkdiskspaceused.cold+0x85/0x136f ... Cal...
CVE-2022-49658
An out-of-bounds vulnerability exists in the Linux kernel. The tnum becomes constant after the call to regboundoffset, but the register's bounds are not. Its min bounds are still not equal to the register's max bounds, disrupting the system's availability. Mitigation Mitigation for this issue is...
CVE-2022-49507
In the Linux kernel, the following vulnerability has been resolved: regulator: da9121: Fix uninit-value in da9121assignchipmodel KASAN report slab-out-of-bounds in regmapinit as follows: BUG: KASAN: slab-out-of-bounds in regmapinit drivers/base/regmap/regmap.c:841 Read of size 1 at addr...
CVE-2022-49264
In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: "In several other operating systems, it is a hard requirement that the second argument to execve2 be the name of a program, thus prohibiting a scenario...
CVE-2024-13907
creationtimestamp| type| source ---|---|--- 2025-02-27 09:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj5mo2p3cy2p 2025-02-27 10:22:18+00:00| seen| https://t.me/cvedetector/19029 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...
CVE-2022-49223
In the Linux kernel, the following vulnerability has been resolved: cxl/port: Hold port reference until decoder release KASAN + DEBUGKOBJECTRELEASE reports a potential use-after-free in cxldecoderrelease where it goes to reference its parent, a cxlport, to free its id back to port-decoderida. BUG...
CVE-2022-49617
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...
CVE-2022-49494
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix possible null-ptr-deref in cadencenanddtprobe It will cause null-ptr-deref when using 'res', if platformgetresource returns NULL, so move using 'res' after devmioremapresource that will check it to avoi...