Linux drivers/regulator/rtq2208-regulator.c DoS

The vulnerability of the drivers/regulator/rtq2208-regulator.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

arch/x86 kernel Data Compromise

The vulnerability of the arch/x86 kernel component of the Linux operating system is related to the exposure of information through mismatches. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Linux netfilter Cluster DoS

The vulnerability of the net/netfilter/xtcluster.c component in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

fs/btrfs Btrfs DoS

The vulnerability of the fs/btrfs component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wire Swiss wire-ios security vulnerability

Wire Swiss wire-ios is an iOS application from Wire Swiss open source. A security vulnerability exists in Wire Swiss wire-ios versions prior to 3.111.1 through 3.124.1, which originates from messages being logged in plaintext to the iOS system log, potentially leading to information disclosure...

Linux smc_core.c DoS

The vulnerability of the smccore.c component in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

UFS driver DoS

The vulnerability of the UFS driver in the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-27022

The CVE-2025-27022 entry concerns Infinera G42 WebGUI HTTP endpoint in version R6.1.3 with a path traversal vulnerability. Root cause: lack of sufficient validation of user-supplied input enables authenticated users to access files readable by the httpd service user, potentially downloading OS fi...

CVE-2025-27021 Operating System Misconfiguration in Infinera G42

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by...

CVE-2025-27021 Operating System Misconfiguration in Infinera G42

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by...

Medatek Linux DoS

The vulnerability of mediatek’s Linux operating system drivers is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

thunderbird security update

128.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.12.0 - Add OpenELA debranding 128.12.0-1 - Update to 128.12.0 build1...

Cisco Spaces Connector: Operating System Command Injection Vulnerability

Cisco Spaces Connector is a system for integrating different devices from Cisco USA. An operating system command injection vulnerability exists in Cisco Spaces Connector that stems from insufficient restrictions on the execution of specific CLI commands, which could lead to elevation of privilege...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Malicious code in os-info-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5db90325052a54f4806fa3551b5830ecb62ee7544dff34a58a48549719bf266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

python3.12 security update

3.12.11-1 - Update to 3.12.11 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98040, RHEL-98010, RHEL-97808, RHEL-98070, RHEL-98213...

Critical Photon OS Security Update - PHSA-2025-5.0-92-0545

Updates of 'krb5' packages of Photon OS have been released...

Linux DRM DoS

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Mozilla Firefox ESR Data Validation

The vulnerability of Mozilla Firefox and Firefox ESR browsers on the macOS operating system is related to insufficient validation of data authenticity. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

D-Link DI-7300G+ security vulnerabilities

The D-Link DI-7300G+ is a ruggedized, enterprise-grade smart gateway from China-based D-Link. The D-Link DI-7300G+ suffers from a command injection vulnerability that is caused by a flaw in httpddebug.asp. An attacker can exploit this vulnerability to execute arbitrary operating system commands o...