5829 matches found
DEBIAN-CVE-2025-40237
In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfsencodefid with sumount Calling intotifyshowfdinfo on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race...
DEBIAN-CVE-2025-40226
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Account for failed debug initialization When the SCMI debug subsystem fails to initialize, the related debug root will be missing, and the underlying descriptor will be NULL. Handle this fault condition in the...
DEBIAN-CVE-2025-40229
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix potential memory leak by cleaning opsfilter in damondestroyscheme Currently, damondestroyscheme only cleans up the filter list but leaves opsfilter untouched, which could lead to memory leaks when a scheme is...
BELL-CVE-2025-66293
Bulletin has no description...
DSA-6071-1 unbound - security update
Bulletin has no description...
DEBIAN-CVE-2025-66453
Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...
MINI-R849-QFWW-22M3
Bulletin has no description...
MINI-PC3H-MXHR-Q5VF
Bulletin has no description...
BELL-CVE-2025-13836
Bulletin has no description...
DEBIAN-CVE-2025-61729
Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can...
DEBIAN-CVE-2025-13639
Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2025-13721
Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2025-13632
Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. Chromium security severity: High...
RHSA-2025:22399 Red Hat Security Advisory: haproxy security update
Bulletin has no description...
The vulnerability of the Cisco Unified Contact Center Express (Unified CCX) Editor software lies in the lack of authentication for a critical function. This allows attackers to circumvent existing security restrictions and increase their privileges.
The vulnerability of the Cisco Unified Contact Center Express Unified CCX Editor software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and gain increased privileges...
MINI-VG56-FJCQ-77F9
Bulletin has no description...
DEBIAN-CVE-2025-58436
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a client that connects to cupsd but sends slow messages, e.g. only one byte per second, delays cupsd as a whole, such that it becomes unusable by other clients. This issue...
CGA-QHVM-CC5H-8JCH
Bulletin has no description...