352 matches found
CVE-2022-49571 tcp: Fix data-races around sysctl_tcp_max_reordering.
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpmaxreordering. While reading sysctltcpmaxreordering, it can be changed concurrently. Thus, we need to add READONCE to its readers...
GHSA-H8C3-8522-VXC6 vulnerabilities
Vulnerabilities for packages: busybox...
openSUSE Security Advisory (SUSE-SU-2024:0455-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2025:0591-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-1215
A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...
CVE-2024-54658
A flaw was found in WebKitGTK. Processing malicious web content can cause a denial of service due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK...
CVE-2025-1151
creationtimestamp| type| source ---|---|--- 2025-02-10 17:01:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113980661739594795 2025-02-10 17:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtnhttbln2n 2025-02-10 18:45:32+00:00| seen|...
CVE-2024-36556
Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...
CVE-2025-21562
creationtimestamp| type| source ---|---|--- 2025-01-21 21:00:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2474 2025-01-21 21:19:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrr7ih472t 2025-01-21 22:05:00+00:00| seen|...
CVE-2024-57895
CVE-2024-57895 affects the Linux kernel component ksmbd. A bug occurs when setting file times: ksmbd may set atime/mtime via notify_change without updating ctime, triggering a kernel warning. The Astra Linux bulletin and other connected entries describe the fix as adding ATTR_CTIME flags when set...
CVE-2024-57763
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...
CVE-2025-0404
creationtimestamp| type| source ---|---|--- 2025-01-13 00:35:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113818242834218345 2025-01-13 01:09:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1346 2025-01-13 01:15:21+00:00| seen|...
PT-2025-2909 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected. Description: A potential issue has been identified, but details are not provided due to the rejection of the candidate number. No information is available on the severity, affected...
CVE-2025-23110
creationtimestamp| type| source ---|---|--- 2025-01-10 22:01:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113806310636835012 2025-01-10 22:04:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1246 2025-01-10 22:16:22+00:00| seen|...
PT-2025-1983 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A vulnerability has been identified, but details are not provided in the given input. No information is available about the estimated number of potentially affected devices or real-worl...
CVE-2024-47032
In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-13004
creationtimestamp| type| source ---|---|--- 2024-12-29 06:38:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113734732444893707 2024-12-29 07:15:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leghusyvmu2k 2024-12-29 09:00:50+00:00| seen|...
CVE-2022-44519 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...