Ubuntu: Security Advisory (USN-7339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2025-03 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5053596)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2025-2177 libzvbi search.c vbi_search_new integer overflow

A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbisearchnew of the file src/search.c. The manipulation of the argument patlen leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2022-49571 tcp: Fix data-races around sysctl_tcp_max_reordering.

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpmaxreordering. While reading sysctltcpmaxreordering, it can be changed concurrently. Thus, we need to add READONCE to its readers...

GHSA-H8C3-8522-VXC6 vulnerabilities

Vulnerabilities for packages: busybox...

openSUSE Security Advisory (SUSE-SU-2024:0455-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:0591-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

CVE-2024-54658

A flaw was found in WebKitGTK. Processing malicious web content can cause a denial of service due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK...

CVE-2025-1151

creationtimestamp| type| source ---|---|--- 2025-02-10 17:01:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113980661739594795 2025-02-10 17:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtnhttbln2n 2025-02-10 18:45:32+00:00| seen|...

CVE-2024-36556

Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh, and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb have a Hardcoded password vulnerability...

CVE-2025-21562

creationtimestamp| type| source ---|---|--- 2025-01-21 21:00:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2474 2025-01-21 21:19:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrr7ih472t 2025-01-21 22:05:00+00:00| seen|...

CVE-2024-57895

CVE-2024-57895 affects the Linux kernel component ksmbd. A bug occurs when setting file times: ksmbd may set atime/mtime via notify_change without updating ctime, triggering a kernel warning. The Astra Linux bulletin and other connected entries describe the fix as adding ATTR_CTIME flags when set...

CVE-2024-57763

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...

CVE-2025-0404

creationtimestamp| type| source ---|---|--- 2025-01-13 00:35:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113818242834218345 2025-01-13 01:09:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1346 2025-01-13 01:15:21+00:00| seen|...

PT-2025-2909 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected. Description: A potential issue has been identified, but details are not provided due to the rejection of the candidate number. No information is available on the severity, affected...

CVE-2025-23110

creationtimestamp| type| source ---|---|--- 2025-01-10 22:01:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113806310636835012 2025-01-10 22:04:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1246 2025-01-10 22:16:22+00:00| seen|...

PT-2025-1983 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A vulnerability has been identified, but details are not provided in the given input. No information is available about the estimated number of potentially affected devices or real-worl...

CVE-2024-47032

In constructtransactionfromcmd of lwisioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-13004

creationtimestamp| type| source ---|---|--- 2024-12-29 06:38:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113734732444893707 2024-12-29 07:15:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leghusyvmu2k 2024-12-29 09:00:50+00:00| seen|...