GHSA-3VQQ-45QG-2XF6 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-H2VC-RGMF-CP34 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips...

CVE-2025-10871 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips...

GHSA-MQ5H-8F38-3XWP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips...

CVE-2025-9642 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips...

GHSA-MFCP-RJV7-385M vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips...

EUVD-2025-206464

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys, where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or...

CVE-2025-33218

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys, where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or...

CVE-2025-33218

CVE-2025-33218 affects the NVIDIA GPU Display Driver for Windows, in the kernel-mode nvlddmkm.sys, where an integer overflow could enable a local attacker to achieve code execution, privilege escalation, data tampering, DoS, or information disclosure. Public advisories from NVIDIA enumerate affec...

CVE-2025-33218

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys, where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or...

ALPINE-CVE-2025-58150

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing...

UBUNTU-CVE-2025-58150

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing...

CVE-2025-58150 x86: buffer overrun with shadow paging + tracing

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing...

CVE-2025-58150

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing...

EUVD-2025-206476

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing...

EUVD-2025-206333

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint...

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...

GHSA-5F7Q-JPQC-WP7H Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...

openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

A flaw was found in OpenSSL. When applications directly call the low-level CRYPTOocb128encrypt or CRYPTOocb128decrypt functions with non-block-aligned lengths in a single call on hardware-accelerated builds, the trailing 1-15 bytes of a message may be exposed in cleartext. These exposed bytes are...

CVE-2025-55292

Meshtastic is an open source mesh networking solution. In the current Meshtastic architecture, a Node is identified by their NodeID, generated from the MAC address, rather than their public key. This aspect downgrades the security, specifically by abusing the HAM mode which doesn't use encryption...