9517 matches found
CVE-2022-49186 clk: visconti: prevent array overflow in visconti_clk_register_gates()
In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconticlkregistergates This code was using -1 to represent that there was no reset function. Unfortunately, the -1 was stored in u8 so the if clksi.rsid = 0 condition was always true. Th...
CVE-2022-49155
Summary (CVE-2022-49155): The Linux kernel’s scsi/qla2xxx path (qla2xxx_create_qpair) was patched to suppress a kernel complaint arising from using smp_processor_id() in preemptible code (as seen in systemd-udevd). The connected advisories confirm the issue is addressed in the kernel and referenc...
CVE-2022-49128
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Add missing pmruntimeputsync pmruntimegetsync will increase the rumtime PM counter even when it returns an error. Thus a pairing decrement is needed to prevent refcount leak. Fix this by replacing this API with...
CVE-2022-49107 ceph: fix memory leak in ceph_readdir when note_last_dentry returns error
In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephreaddir when notelastdentry returns error Reset the lastreaddir at the same time, and add a comment explaining why we don't free lastreaddir when diremit returns false...
CVE-2022-49074 irqchip/gic-v3: Fix GICR_CTLR.RWP polling
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix GICRCTLR.RWP polling It turns out that our polling of RWP is totally wrong when checking for it in the redistributors, as we test the distributor bit index, whereas it is a different bit number in the RDs...
CVE-2021-47647
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E clock related kernel oops that are caused by a missing clock parent. pcie0rchngclksrc has numparents set to 2 but only one parent is actually set via parenthws, it should also ha...
CVE-2025-25515
creationtimestamp| type| source ---|---|--- 2025-02-26 01:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj276a7eun2y 2025-02-26 01:44:50+00:00| seen| https://t.me/cvedetector/18934 2025-02-26 19:49:00+00:00| seen|...
CVE-2024-52925
OPSWAT MetaDefender Kiosk prior to version 4.7.0 is affected by an arbitrary code execution vulnerability via the MD Kiosk Unlock Device feature for software-encrypted USB drives. The root cause is exploitation of the unlock device functionality, enabling an attacker to execute code on the host. ...
CVE-2025-25813
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminfiles.php...
CVE-2025-27148
creationtimestamp| type| source ---|---|--- 2025-02-25 22:08:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizusxyrb72l 2025-02-25 23:14:04+00:00| seen| https://t.me/cvedetector/18907 2025-02-25 23:48:50+00:00| seen|...
CVE-2024-45424 Zoom Workplace Apps - Business Logic Error
Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access...
CVE-2024-12368
creationtimestamp| type| source ---|---|--- 2025-02-25 18:22:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5340 2025-02-25 19:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114066255003294911 2025-02-25 21:33:58+00:00| seen|...
CVE-2025-27000
creationtimestamp| type| source ---|---|--- 2025-02-25 17:03:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizdqxsmnx2k 2025-02-25 17:22:46+00:00| seen| https://t.me/cvedetector/18873 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...
CVE-2025-26987
creationtimestamp| type| source ---|---|--- 2025-02-25 17:03:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizdqxfyeh2k 2025-02-25 17:22:41+00:00| seen| https://t.me/cvedetector/18870 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...
CVE-2025-21626
GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the status.php endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the status.p...
CVE-2025-26594 X.org: xwayland: use-after-free of the root cursor
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free...
GHSA-V2XC-3R7V-9VRM vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-26943
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Blind SQL Injection.This issue affects Easy Quotes: from n/a through = 1.2.2...
CVE-2025-26949 WordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Team Section Block team-section allows Stored XSS.This issue affects Team Section Block: from n/a through = 1.0.9...