30203 matches found
USN-7301-1: Linux kernel vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...
CVE-2025-26594
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free...
CVE-2025-26598
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...
CVE-2025-26601
A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...
CVE-2025-26600 Xorg: xwayland: use-after-free in playreleasedevents()
A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...
CVE-2025-26598
An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...
CVE-2025-26596 Xorg: xwayland: heap overflow in xkbwritekeysyms()
A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms differs from what is written in XkbWriteKeySyms, which may lead to a heap-based buffer overflow...
CVE-2025-26594
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free...
CVE-2025-26594
A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free...
GHSA-F73R-7G7H-494M vulnerabilities
Vulnerabilities for packages: gitlab-pages, gitlab-cng...
GHSA-3PGX-69PV-46WX vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-QW28-P6QX-VJ78 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-2CCW-R7QP-2P9J vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-26911 WordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bowo System Dashboard system-dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects System Dashboard: from n/a through = 2.8.18...
SUSE-SU-2025:20128-1 Security update for vim
This update for vim fixes the following issues: vim was updated to 9.1.1101: - CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 - CVE-2024-43790: Fixed Out of bounds read when performing a search command bsc1229685 - CVE-2024-43802: Fixed heap-buffer-overflow in instypebuf bsc1229822 -...
GHSA-2XHP-FVVW-3838 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9VWH-R62Q-3CGR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6FJ5-M574-P4W9 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...