CVE-2025-38082

CVE-2025-38082 refers to a Linux kernel vulnerability in gpio: virtuser where an out-of-bounds write could occur if a caller wrote more characters than the destination buffer could hold in simple_write_to_buffer. The issue is mitigated by a fix that truncates the input size to the available buffe...

CVE-2025-20298

In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory by default, C:\Program...

SonicWall SMA 1000 Series < 12.4.3-02963 SSRF (SNWLID-2025-0010)

The remote host is a SonicWall SMA 1000 Series device that may be affected by a server-side request forgery SSRF vulnerability. An SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cau...

CVE-2022-3746

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller EC interface...

GHSA-2Q6R-344G-CX46

creationtimestamp| type| source ---|---|--- 2025-05-21 15:03:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114546430468372798...

GHSA-PJ3V-9CM8-GVJ8

creationtimestamp| type| source ---|---|--- 2025-04-24 14:05:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13224 2025-04-24 14:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393533525785086...

GHSA-C9PR-Q8GX-3MGP

creationtimestamp| type| source ---|---|--- 2025-04-02 21:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10143 2025-04-02 22:06:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114270641178668879 2025-04-02 22:06:50+00:00| seen|...

CVE-2025-21948

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

Fedora: Security Advisory (FEDORA-2025-d58f8ec8ec)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-54XQ-CGQR-RPM3

creationtimestamp| type| source ---|---|--- 2025-03-11 22:39:27+00:00| seen| https://gist.github.com/iamJakeRobbins/defef5643ea488f5b864b06ab463866f...

CVE-2025-1795 Mishandling of comma during folding and unicode-encoding of email headers

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted...

CVE-2024-39328

creationtimestamp| type| source ---|---|--- 2025-02-18 18:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihukyouae2y 2025-02-18 21:33:52+00:00| seen|...

Security Bulletin: Apache Commons IO used by IBM InfoSphere Identity Insight has a potential vulnerability (CVE-2024-47554)

Summary The Apache Commons IO used by Identity Insight is vulnerable to a denial of service, caused by an uncontrolled resource consumption flaw in the org.apache.commons.io.input.XmlStreamReader class. By sending a specially crafted input, a remote attacker could exploit this vulnerability to...

GHSA-J3G9-WG22-V955

creationtimestamp| type| source ---|---|--- 2025-01-20 22:59:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113863162643434691 2025-01-20 23:00:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2373...

CVE-2024-42188

creationtimestamp| type| source ---|---|--- 2024-11-14 15:38:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113482052698777533 2024-11-14 18:20:01+00:00| seen| https://t.me/cvedetector/10968...

Intel® Graphics Driver Advisory

Summary: A potential security vulnerability in the Intel® Graphics Driver installers for versions 15.40 and 15.45 may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for the Intel® Graphics...

AMD Ryzen Master Monitoring SDK November 2024 Security Update

AMD has informed HP of a potential vulnerability identified in the AMD Ryzen™ Master Monitoring SDK, which might allow arbitrary code execution. AMD has released software updates to mitigate the potential vulnerability. AMD has released updates to mitigate the potential vulnerability. HP has...

CVE-2024-50007 ALSA: asihpi: Fix potential OOB array access

In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity che...

CVE-2024-49915 drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for clkmgr in dcn32inithw This commit addresses a potential null pointer dereference issue in the dcn32inithw function. The issue could occur when dc-clkmgr is null. The fix adds a check to ensure...

CVE-2024-47699

CVE-2024-47699 relates to the Linux kernel nilfs2 filesystem. The issue is a potential NULL pointer dereference in nilfs_btree_insert() when the b-tree root is broken and has height &gt; 1, even if the root has 0 children. The root cause is that, in certain corrupted images, nilfs_btree_do_lookup...