37097 matches found
Photon OS 5.0: Linux PHSA-2025-5.0-0708
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0708. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a post-release reuse vulnerability that stems from post-release reuse in the password manager. An attacker can exploit this vulnerability to perform a sandbox escape...
Linux Distros Unpatched Vulnerability : CVE-2022-50661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing...
Fedora: Security Advisory (FEDORA-2025-e235793f10)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-6078-1 firefox-esr - security update
Bulletin has no description...
CVE-2025-64497
Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10 allow attackers to access file release system information in projects they do not...
Security Bulletin: IBM® Db2® is vulnerable to denial of service when running federated queries with the certain condition (CVE-2025-36071)
Summary IBM® Db2® is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted federated query due to improper release of memory resources. Vulnerability Details CVEID:CVE-2025-36071 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2...
Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to the improper release of resources after use (CVE-2025-36006)
Summary IBM® Db2® could allow an authenticated user to cause a denial of service due to the improper release of resources after use. Vulnerability Details CVEID:CVE-2025-36006 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a...
curl: Stack Buffer Overflow in cURL wolfSSL Backend (lib/vtls/wolfssl.c)
Summary: A stack-based buffer overflow exists in the wsslstrerror function of cURL's wolfSSL TLS backend. The function uses an unsafe strcpy call, relying solely on a DEBUGASSERT macro for boundary checking. This macro is disabled in production release builds -DNDEBUG, allowing memory corruption...
EUVD-2025-202158
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox 146 and Firefox ESR 140.6...
EUVD-2025-202157
Same-origin policy bypass in the Request Handling component. This vulnerability affects Firefox 146, Firefox ESR 115.31, and Firefox ESR 140.6...
EUVD-2025-201939
Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146 and Firefox ESR 140.6...
EUVD-2025-202162
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox 146, Firefox ESR 115.31, and Firefox ESR 140.6...
EUVD-2022-55744
In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing struct seccompfilter and some objects included in it. We can reproduce...
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgraded to 13.23: CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS bsc1253332 CVE-2025-12818: Fixed integer overflow in allocation-size calculations within libpq bsc1253333 Other fixes: Use...
CVE-2025-14325
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...
CVE-2025-14333
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in...
CVE-2022-50672
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynq-ipi: fix error handling while deviceregister fails If deviceregister fails, it has two issues: 1. The name allocated by devsetname is leaked. 2. The parent of device is not NULL, deviceunregister is called in...
CVE-2022-50669
In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...