CVE-2025-38460

CVE-2025-38460 relates to the Linux kernel, fixing a potential null pointer dereference in the ATM clip path (to_atmarpd()). The issue arises because to_atmarpd() can be called without RTNL protection, notably via clip_neigh_solicit() / neigh_ops->solicit(), and there is no RTNL dependency aro...

GHSA-H9MQ-F6Q5-6C8M

creationtimestamp| type| source ---|---|--- 2025-07-16 20:10:13+00:00| seen| https://gist.github.com/safer-bot/e99c53adf7d0285b48dff97d88c6c48e...

GHSA-XW5Q-G62X-2QJC

creationtimestamp| type| source ---|---|--- 2025-07-01 02:07:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19995 2025-07-01 03:54:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114775953190071346...

BELL-CVE-2025-38053

Bulletin has no description...

GHSA-24WV-6C99-F843

creationtimestamp| type| source ---|---|--- 2025-06-20 17:44:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114716930881228437 2025-06-20 17:46:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19004...

CVE-2025-38082

CVE-2025-38082 refers to a Linux kernel vulnerability in gpio: virtuser where an out-of-bounds write could occur if a caller wrote more characters than the destination buffer could hold in simple_write_to_buffer. The issue is mitigated by a fix that truncates the input size to the available buffe...

CVE-2025-20298

In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory by default, C:\Program...

SonicWall SMA 1000 Series < 12.4.3-02963 SSRF (SNWLID-2025-0010)

The remote host is a SonicWall SMA 1000 Series device that may be affected by a server-side request forgery SSRF vulnerability. An SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cau...

CVE-2022-3746

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller EC interface...

GHSA-2Q6R-344G-CX46

creationtimestamp| type| source ---|---|--- 2025-05-21 15:03:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114546430468372798...

GHSA-PJ3V-9CM8-GVJ8

creationtimestamp| type| source ---|---|--- 2025-04-24 14:05:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13224 2025-04-24 14:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393533525785086...

GHSA-C9PR-Q8GX-3MGP

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10143 2025-04-02 22:06:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270641178668879 2025-04-02 22:06:50+00:00| seen|...

CVE-2025-21948

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

Fedora: Security Advisory (FEDORA-2025-d58f8ec8ec)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-54XQ-CGQR-RPM3

creationtimestamp| type| source ---|---|--- 2025-03-11 22:39:27+00:00| seen| https://gist.github.com/iamJakeRobbins/defef5643ea488f5b864b06ab463866f...

CVE-2025-1795 Mishandling of comma during folding and unicode-encoding of email headers

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted...

CVE-2024-39328

creationtimestamp| type| source ---|---|--- 2025-02-18 18:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihukyouae2y 2025-02-18 21:33:52+00:00| seen|...

Security Bulletin: Apache Commons IO used by IBM InfoSphere Identity Insight has a potential vulnerability (CVE-2024-47554)

Summary The Apache Commons IO used by Identity Insight is vulnerable to a denial of service, caused by an uncontrolled resource consumption flaw in the org.apache.commons.io.input.XmlStreamReader class. By sending a specially crafted input, a remote attacker could exploit this vulnerability to...

GHSA-J3G9-WG22-V955

creationtimestamp| type| source ---|---|--- 2025-01-20 22:59:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113863162643434691 2025-01-20 23:00:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2373...

CVE-2024-42188

creationtimestamp| type| source ---|---|--- 2024-11-14 15:38:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113482052698777533 2024-11-14 18:20:01+00:00| seen| https://t.me/cvedetector/10968...