CERTFR-2025-CTI-005

creationtimestamp| type| source ---|---|--- 2025-04-17 09:27:53+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114352591453852456...

CVE-2025-22108

In the Linux kernel, the following vulnerability has been resolved: bnxten: Mask the bdcnt field in the TX BD properly The bdcnt field in the TX BD specifies the total number of BDs for the TX packet. The bdcnt field has 5 bits and the maximum number supported is 32 with the value 0...

CVE-2025-22080

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdrfirstde The "deoff" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINTMAX - 16 then the check does...

CVE-2025-29450

An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component...

CVE-2025-24911

Overview XML documents optionally contain a Document Type Definition DTD, which, among other features, enables the definition of XML entities. It is possible to define an entity by providing a substitution string in the form of a URI. Once the content of the URI is read, it is fed back into the...

CVE-2025-22018

In the Linux kernel, the following vulnerability has been resolved: atm: Fix NULL pointer dereference When MPOAcacheimposrcvd receives the msg, it can trigger Null Pointer Dereference Vulnerability if both entry and holdingtime are NULL. Because there is only for the situation where entry is NULL...

CVE-2025-22021

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, to be able to find the right socket if any. Then socketmatch can...

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-30698

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle...

CVE-2024-55211

creationtimestamp| type| source ---|---|--- 2025-04-16 05:00:06+00:00| published-proof-of-concept| Telegram/mQBAnIB4wxCayakdSJg64fJulzrdejim5tVILr8NLm8g 2025-04-17 17:57:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12295 2025-04-17 18:54:26+00:00| seen|...

SUSE: Security Advisory (SUSE-SU-2025:1263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-30718

...

CVE-2025-30716

...

CVE-2025-30717

Oracle E‑Business Suite Teleservice (Service Diagnostics Scripts) is affected in 12.2.3–12.2.14. CVE-2025-30717 describes a low‑privileged, network‑accessible (HTTP) flaw that can lead to unauthorized data access or full access to Teleservice. CVSS v3.1 base score 6.5 (Confidentiality impact). Co...

CVE-2025-30691

CVE-2025-30691 affects Oracle Java SE (Compiler) and Oracle GraalVM for JDK, with affected Oracle Java SE versions 21.0.6 and 24 and GraalVM JDK 21.0.6 and 24. The issue can be exploited remotely over network via multiple protocols and through APIs that supply data to the APIs; successful attacks...

CVE-2025-30690

...

CVE-2025-21587

...

CVE-2025-21580

...

CVE-2025-21579

...

CVE-2025-21577

CVE-2025-21577 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. The vulnerability allows a low-privilege, network-exposed attacker to cause a hang or crash (DoS) in MySQL Server via the InnoDB component. Reported CVSS 3.1 Base Score 6.5 (Av...