10987 matches found
CLSA-2025-1758914381 httpd: Fix of 4 CVEs
CVE-2025-49630: fix denial of service attack triggered by untrusted clients causing an assertion in modproxyhttp2 - CVE-2025-23048: fix access control bypass by trusted clients in modssl configurations - CVE-2024-47252: escape user-supplied data in modssl to prevent untrusted SSL/TLS clients from...
CVE-2025-56463
Mercusys MW305R 3.30 and below is has a Transport Layer Security TLS certificate private key disclosure...
USN-7769-3: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...
USN-7769-3 linux-aws-6.14, linux-hwe-6.14 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...
PT-2025-39650
Name of the Vulnerable Software and Affected Versions Mercusys MW305R versions 3.30 and below Description The Mercusys MW305R router firmware contains a flaw that leads to a Transport Layer Security TLS certificate private key disclosure. This allows potential attackers to obtain the private key...
Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7775-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7775-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
Mercusys MW305R 安全漏洞
Mercusys MW305R is a wireless router from Mercusys, China. A security vulnerability exists in Mercusys MW305R version 3.30 and earlier, which originates from TLS certificate private key disclosure...
CVE-2025-56463
Mercusys MW305R 3.30 and below is has a Transport Layer Security TLS certificate private key disclosure...
CVE-2025-56463
Mercusys MW305R routers with firmware version 3.30 and earlier are affected by a flaw that leads to TLS certificate private key disclosure. Root cause: an issue in the device firmware that allows private key exposure. Impact areas documented include confidentiality, integrity, and availability as...
CLSA-2025-1758821123 perl-HTTP-Tiny: Fix of CVE-2023-31486
CVE-2023-31486: fix insecure default TLS configuration...
UBUNTU-CVE-2025-55558
A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv and is compiled by Inductor, leading to a Denial of Service DoS...
PYSEC-2025-199
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error...
UBUNTU-CVE-2025-46149
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error...
USN-7767-2 linux-realtime-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...
USN-7779-1 linux-ibm, linux-ibm-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...
USN-7769-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...
Tech Overtakes Gaming as Top DDoS Attack Target, New Gcore Radar Report Finds
The latest Gcore Radar report analyzing attack data from Q1–Q2 2025, reveals a 41% year-on-year increase in total attack volume. The largest attack peaked at 2.2 Tbps, surpassing the 2 Tbps record in late 2024. Attacks are growing not only in scale but in sophistication, with longer durations,...
USN-7776-1 linux-oracle-5.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...
CVE-2025-55559
TensorFlow v2.18.0 has a DoS in tf.keras.layers.Conv2D when padding is set to 'valid'. The issue is tied to the padding handling in Conv2D, with no explicit exploit details provided in the connected documents. Practical impact is Denial of Service (availability) as per the CVE metrics; the precis...
