37202 matches found
OESA-2025-2623 nasm security update
NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump. Security Fixes...
[SECURITY] Fedora 42 Update: fcitx5-kkc-5.1.8-1.fc42
This provides libkkc input method support for fcitx5. Released under GPL3+...
PT-2025-45500
Name of the Vulnerable Software and Affected Versions mruby version 3.4.0 Description A flaw exists in mruby version 3.4.0 within the ary fill exec function located in the file mrbgems/mruby-array-ext/src/array.c. Manipulation of the start and length arguments can result in an out-of-bounds write...
AI SDK 安全漏洞
AI SDK is a TypeScript AI toolkit open-sourced by Vercel. A security vulnerability exists in AI SDK versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta, which stems from the possibility that a user could bypass the file type whitelist to upload a file...
编号撤回
libxml2 is a GNOME open source library for parsing XML documents. It is written in C and can be called by many languages, such as C, C++, XSH. A resource management error vulnerability exists in libxml2, which stems from an improper handling of namespace references in the xmlSetTreeDoc function,...
Out-of-bounds write vulnerability
A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been ma...
Photon OS 5.0: Binutils PHSA-2025-5.0-0670
An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0670. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2025-12745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. Th...
IBM Db2 安全漏洞
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
PT-2025-45492
Name of the Vulnerable Software and Affected Versions IBM Db2 versions 10.5.0 through 10.5.11 IBM Db2 versions 11.1.0 through 11.1.4.7 IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3 Description An authenticated user may be able to cause a denial of service in IBM Db...
PT-2025-49369
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the smb3 fs context parse param function within the CIFS client. The issue occurs when fsconfig is called multiple times, where memory associat...
CVE-2025-52881 affecting package runc for versions less than 1.3.3-1
CVE-2025-52881 affecting package runc for versions less than 1.3.3-1. A patched version of the package is available...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.1.3 release and security update
Red Hat JBoss Web Server 6.1.3 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...
CVE-2025-40777 affecting package bind for versions less than 9.20.15-1
CVE-2025-40777 affecting package bind for versions less than 9.20.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5. A patched version of the package is available...
CVE-2025-21071
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
[SECURITY] Fedora 42 Update: qt5-qtwebsockets-5.15.18-1.fc42
The QtWebSockets module implements the WebSocket protocol as specified in RFC 6455. It solely depends on Qt no external dependencies...
[SECURITY] Fedora 42 Update: qt5-qtconnectivity-5.15.18-1.fc42
Qt5 - Connectivity components...