850 matches found
CVE-2025-14095
CVE-2025-14095, CVE-2025-14096, and CVE-2025-14097 describe vulnerabilities in multiple Radiometer products. The issues arise from design weaknesses in application/OS access control, credential protection, and remote code execution conditions, with exploitation involving physical access (for 1409...
luksmeta: Data corruption when handling LUKS1 partitions with luksmeta
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...
CVE-2025-48569
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
Unity Linux 20.1070e Security Update: luksmeta (UTSA-2025-991100)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991100 advisory. A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissio...
EUVD-2025-201804
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48569
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48569
CVE-2025-48569 is an Android DoS vulnerability described in multiple sources as a possible permanent denial of service caused by resource exhaustion, exploitable locally without user interaction. The Red Hat, CIRCL, EUVD, NVD and Android bulletin entries concur on the issue, with the Android 16 Q...
CVE-2025-48569
In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48576
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...
PT-2025-49579
Name of the Vulnerable Software and Affected Versions versions prior to 2025-48569 Description A permanent denial of service may occur due to resource exhaustion. This can result in a local denial of service without requiring additional execution privileges or user interaction. Recommendations At...
CVE-2025-0658
A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol causes the device to crash. The device enters a fault state; after a reset, a second packet can leave it permanently unresponsive until a manual power cycle is performed...
OESA-2025-2688 luksmeta security update
LUKSMeta is a simple library for storing metadata in the LUKSv1 header. Some projects need to store additional metadata about a LUKS volume that is accessable before unlocking it. Fortunately, there is a gap in the LUKS header between the end of the slot area and the payload offset, LUKSMeta uses...
EUVD-2024-55078
Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country,...
MAL-2025-186499 Malicious code in decode-authenticate-final-delta-enum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5332fae3d3f2e74383dc62999e6522bb2c951f669ec62dc5b8e5cffecba079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in permanent-bronze-tiger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085154849ecd9d851b716739801e5575c18af0883ae093750a41601c128ef731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in permanent-sapphire-panda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0592feb73e1a388f0a8b980abf457d1f51570673fe0ea7efec8a69ed91df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117172
Malicious code in permanent-bronze-tiger npm...
EUVD-2025-117171
Malicious code in permanent-sapphire-panda npm...