17280 matches found
CVE-2025-22050
In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rxcomplete Missing usbnetgoingaway Check in Critical Path. The usbsubmiturb function lacks a usbnetgoingaway validation, whereas usbnetqueueskb includes this check. This inconsistency creates a race conditio...
CVE-2025-22872
A flaw was found in the HTML tokenizer component. This vulnerability allows incorrect DOM construction and potential content misplacement via unquoted attribute values ending with a / in tags within foreign content contexts such as or . Mitigation Mitigation for this issue is either not available...
CERTFR-2025-CTI-005
creationtimestamp| type| source ---|---|--- 2025-04-17 09:27:53+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114352591453852456...
CVE-2025-22108
In the Linux kernel, the following vulnerability has been resolved: bnxten: Mask the bdcnt field in the TX BD properly The bdcnt field in the TX BD specifies the total number of BDs for the TX packet. The bdcnt field has 5 bits and the maximum number supported is 32 with the value 0...
CVE-2025-22080
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdrfirstde The "deoff" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINTMAX - 16 then the check does...
CVE-2025-29450
An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component...
CVE-2025-24911
Overview XML documents optionally contain a Document Type Definition DTD, which, among other features, enables the definition of XML entities. It is possible to define an entity by providing a substitution string in the form of a URI. Once the content of the URI is read, it is fed back into the...
CVE-2025-22018
In the Linux kernel, the following vulnerability has been resolved: atm: Fix NULL pointer dereference When MPOAcacheimposrcvd receives the msg, it can trigger Null Pointer Dereference Vulnerability if both entry and holdingtime are NULL. Because there is only for the situation where entry is NULL...
CVE-2025-22021
In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nfsklookupslowv4 does the conntrack lookup for IPv4 packets to restore the original 5-tuple in case of SNAT, to be able to find the right socket if any. Then socketmatch can...
CVE-2025-21587
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...
CVE-2025-30698
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle...
CVE-2024-55211
creationtimestamp| type| source ---|---|--- 2025-04-16 05:00:06+00:00| published-proof-of-concept| Telegram/mQBAnIB4wxCayakdSJg64fJulzrdejim5tVILr8NLm8g 2025-04-17 17:57:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12295 2025-04-17 18:54:26+00:00| seen|...
SUSE: Security Advisory (SUSE-SU-2025:1263-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-30718
...
CVE-2025-30717
Oracle E‑Business Suite Teleservice (Service Diagnostics Scripts) is affected in 12.2.3–12.2.14. CVE-2025-30717 describes a low‑privileged, network‑accessible (HTTP) flaw that can lead to unauthorized data access or full access to Teleservice. CVSS v3.1 base score 6.5 (Confidentiality impact). Co...
CVE-2025-30716
...
CVE-2025-30691
CVE-2025-30691 affects Oracle Java SE (Compiler) and Oracle GraalVM for JDK, with affected Oracle Java SE versions 21.0.6 and 24 and GraalVM JDK 21.0.6 and 24. The issue can be exploited remotely over network via multiple protocols and through APIs that supply data to the APIs; successful attacks...
CVE-2025-30690
...