PT-2025-33773

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the pptp xmit function related to insufficient checks on the size of the skb data structure. This can lead to reading uninitialized data, as...

SUSE CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-50485

creationtimestamp| type| source ---|---|--- 2025-07-28 23:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2p5xykrx2d...

CVE-2025-32731

A reflected cross-site scripting xss vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerabilit...

CVE-2025-30754

creationtimestamp| type| source ---|---|--- 2025-07-28 14:06:12+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luzr7lucmc22 2025-11-26 22:13:04+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6kutniokc2l 2025-11-26 22:23:17+00:00| seen|...

CVE-2025-6241

creationtimestamp| type| source ---|---|--- 2025-07-28 13:54:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3luzqleupgi2y...

DEBIAN-CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

AZL-65916 CVE-2025-38495 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

AZL-73464 CVE-2025-38495 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

UBUNTU-CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-38495

CVE-2025-38495 affects the Linux kernel HID core. The allocated HID report buffer did not account for the reserved report ID byte, causing only 7 guaranteed bytes instead of 8. A fix ensures the buffer can contain the reserved ID. Upstream commits resolve this; upgrade to a kernel version that in...

CVE-2025-38495 HID: core: ensure the allocated report buffer can contain the reserved report ID

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-38495 HID: core: ensure the allocated report buffer can contain the reserved report ID

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account f...

CVE-2025-38476

In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpldosrhinline. Running lwtdstcacherefloop.sh in selftest with KASAN triggers the splat below 0. rpldosrhinline fetches ipv6hdrskb and accesses it after skbcowhead, which is illegal as the header could ...

CVE-2023-53160

creationtimestamp| type| source ---|---|--- 2025-07-28 09:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzbqgnxrf27...

CVE-2025-54416

creationtimestamp| type| source ---|---|--- 2025-07-28 09:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3luzbaa54mw2b 2025-08-03 07:31:35+00:00| seen| https://t.me/bhhub/1120 2025-08-03 07:31:35+00:00| seen| https://t.me/bhhub/858 2026-04-13 19:00:13+00:00|...

MedDream PACS Premium 跨站脚本漏洞

MedDream PACS Premium is an enterprise-class image storage and management server suite from MedDream. MedDream PACS Premium suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input by the radiationDoseReport.php function. No detailed...

PT-2025-31104 · Meddream · Meddream Pacs Premium

Name of the Vulnerable Software and Affected Versions: meddream MedDream PACS Premium version 7.3.5.860 Description: A reflected cross-site scripting xss vulnerability exists in the radiationDoseReport.php functionality. A specially crafted URL can lead to arbitrary javascript code execution. An...