CVE-2022-49085

CVE-2022-49085 affects the Linux kernel’s drbd path, fixing five use-after-free bugs in get_initial_state where skb could be freed and later dereferenced. The issue arises when notify_initial_state_done and subsequent notify_*_state_change calls free skb on error, leading to a use-after-free via ...

CVE-2022-49085

In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls notifyinitialstatedoneskb,.. if cb-args5==1. If genlmsgput failed in notifyinitialstatedone, the skb will be freed by nlmsgfreeskb. Then...

CVE-2022-49085 drbd: Fix five use after free bugs in get_initial_state

In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in getinitialstate In getinitialstate, it calls notifyinitialstatedoneskb,.. if cb-args5==1. If genlmsgput failed in notifyinitialstatedone, the skb will be freed by nlmsgfreeskb. Then...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a bug triggered when the ext4 driver dirty pages without notifying the filesystem, which could lead to data...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kaf, certificate-transparency, petname, go-licenses, croc, slsa-verifier, helm-push, go-bindata, kubernetes-dashboard-web, kapp, sqlexporter, cert-manager-webhook-pdns, vertical-pod-autoscaler, sonobuoy, kpt, falco-exporter, neuvector-sigstore-interface,...

GHSA-7498-H3M9-7WV2 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2025-27137

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137

Summary: CVE-2025-27137 affects Dependency-Track where templates are evaluated with Pebble and can be manipulated via the include tag. Prior to version 4.12.6, users with the SYSTEM_CONFIGURATION permission could exploit include to read arbitrary local files (e.g., /etc/passwd, /proc/1/environ) b...

CVE-2025-21704

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usbcdcnotification, we can't calculate an expectedsize. Log an error and discard the notification instead of reading...

CVE-2025-21704

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usbcdcnotification, we can't calculate an expectedsize. Log an error and discard the notification instead of reading...

CGA-WQ37-VQPF-P8J4

Bulletin has no description...

seedparade.co.uk Improper Access Control vulnerability OBB-4027566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-49782

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification...

CVE-2025-24989

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update...

CVE-2025-1464

creationtimestamp| type| source ---|---|--- 2025-02-19 14:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijxmeey662o 2025-02-19 15:00:33+00:00| published-proof-of-concept| Telegram/76DozDHfzy3VuXpR0RrwuMltOqDKxavy520xjGJSvX85-I 2025-02-19 15:39:58+00:00| seen|...

CVE-2024-13533

creationtimestamp| type| source ---|---|--- 2025-02-19 12:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqw4vnbn2p 2025-02-19 14:16:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnjyp5b2z 2025-02-19 16:14:03+00:00| seen|...

CVE-2024-13363

creationtimestamp| type| source ---|---|--- 2025-02-19 09:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtngtw523 2025-02-19 12:03:05+00:00| seen| https://t.me/cvedetector/18421 2025-02-19 15:39:58+00:00| seen|...