5199 matches found
CVE-2025-66449
ConvertXis a self-hosted online file converter. In versions prior to 0.16.0, the endpoint /upload allows an authenticated user to write arbitrary files on the system, overwriting binaries and allowing code execution. The upload function takes file.name directly from user supplied data without doi...
Linux Distros Unpatched Vulnerability : CVE-2025-68178
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-cgroup: fix possible deadlock while configuring policy Following deadlock can be triggered easily by lockdep: WARNING: possible circular locking dependency...
GHSA-M6HQ-F4W9-QRJJ Weblate has improper validation upon invitation acceptance
Impact It was possible to accept an invitation opened by a different Weblate user. Patches https://github.com/WeblateOrg/weblate/pull/16913 Workarounds Users should avoid leaving Weblate sessions with an unattended opened invitation. References Thanks to Nahid0x for responsibly disclosing this...
CVE-2025-8114 affecting package libssh for versions less than 0.10.6-5
CVE-2025-8114 affecting package libssh for versions less than 0.10.6-5. A patched version of the package is available...
CVE-2025-12464 affecting package qemu for versions less than 8.2.0-25
CVE-2025-12464 affecting package qemu for versions less than 8.2.0-25. A patched version of the package is available...
CVE-2025-7424 affecting package libxslt for versions less than 1.1.43-3
CVE-2025-7424 affecting package libxslt for versions less than 1.1.43-3. A patched version of the package is available...
CVE-2025-13193 affecting package libvirt for versions less than 10.0.0-6
CVE-2025-13193 affecting package libvirt for versions less than 10.0.0-6. A patched version of the package is available...
CVE-2025-22103 affecting package kernel for versions less than 6.6.117.1-1
CVE-2025-22103 affecting package kernel for versions less than 6.6.117.1-1. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2022-50652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uio: uiodmemgenirq: Fix missing unlock in irq configuration Commit b74351287d4b uio: fix a sleep-in- atomic-context bug in uiodmemgenirqirqcontrol started calli...
EulerOS 2.0 SP13 : cups (EulerOS-SA-2025-2518)
According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthTyp...
Linux Distros Unpatched Vulnerability : CVE-2022-50638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix bugon in estreesearch caused by bad boot loader inode We got a issue as fllows: ==================================================================...
Linux Distros Unpatched Vulnerability : CVE-2025-14308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length o...
Linux Distros Unpatched Vulnerability : CVE-2023-53858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: serial: samsungtty: Fix a memory leak in s3c24xxserialgetclk in case of error If clkgetrate fails, the clk that has just been allocated needs to be freed...
Linksys RE7000 Router Firmware <= 2.0.15_211230_1012 Buffer Overflow Vulnerability
Linksys RE7000 routers are prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Medium: cups-filters
Issue Overview: CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. In CUPS-Filters versions up to and...
Medium: cups-filters
Issue Overview: CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. In CUPS-Filters versions up to and...
Linux Distros Unpatched Vulnerability : CVE-2025-40310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amd/amdkfd: resolve a race in amdgpuamdkfddevicefinisw There is race in amdgpuamdkfddevicefinisw and interrupt. if amdgpuamdkfddevicefinisw run in b/w...
Linux Distros Unpatched Vulnerability : CVE-2025-40303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: ensure no dirty metadata is written back for an fs with errors BUG During development of a minor feature make sure all btrfsbio::endio is called in task...
CVE-2025-14116
A vulnerability was detected in xerrors Yuxi-Know up to 0.4.0. This vulnerability affects the function OtherEmbedding.aencode of the file /src/models/embed.py. Performing manipulation of the argument healthurl results in server-side request forgery. The attack can be initiated remotely. The explo...