OSV-2025-354 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416762645 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...

PT-2025-21908 · Git +1 · Checkstyle

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: The software experiences a security exception during the parsing of Java statements within the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement function. The cra...

CVE-2025-4506

creationtimestamp| type| source ---|---|--- 2025-05-10 16:36:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15899 2025-05-10 18:30:33+00:00| published-proof-of-concept| Telegram/5jCfy6rNIkT2KBC1Y0rQEULebmDfmr-lomqeEJy5sudorr4 2025-05-10 18:37:29+00:00| seen|...

CVE-2025-4498

creationtimestamp| type| source ---|---|--- 2025-05-10 10:19:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lospphwr3tp2 2025-05-10 10:26:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15887 2025-05-10...

OSV-2025-352 Use-of-uninitialized-value in JS_FreeRuntime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416299802 Crash type: Use-of-uninitialized-value Crash state: JSFreeRuntime fuzzeval.c asyncfuncinit...

PT-2025-21907 · Git +1 · Quickjs

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a use-of-uninitialized-value issue. The crash state involves JS FreeRuntime, occurring within fuzz eval.c during async func init...

CVE-2025-3794

creationtimestamp| type| source ---|---|--- 2025-05-09 23:25:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15857 2025-05-10 00:05:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lormmzq2ajr2 2025-05-10 02:31:40+00:00| seen|...

CVE-2024-25652

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE with access to the Report functionality to gain unauthorized access to remote sessions created by legitimate users through...

CVE-2025-4485

creationtimestamp| type| source ---|---|--- 2025-05-09 19:26:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15818 2025-05-09 22:01:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lor7knkrjsd2 2025-05-09...

CVE-2024-13964

creationtimestamp| type| source ---|---|--- 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-17 21:07:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bf5yz2t...

CVE-2024-13944

creationtimestamp| type| source ---|---|--- 2025-05-09 16:05:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk5kkdag2 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-09...

CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

DEBIAN-CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

UBUNTU-CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

CVE-2025-4468

creationtimestamp| type| source ---|---|--- 2025-05-09 06:46:20+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loptd6q5y7r2 2025-05-09 09:01:22+00:00| published-proof-of-concept| Telegram/ldmHneF67leIor4rXHC1IabsYosLdGsA62p54R3IzFTMQB4...

CVE-2025-37862 HID: pidff: Fix null pointer dereference in pidff_find_fields

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

CVE-2025-3713

creationtimestamp| type| source ---|---|--- 2025-05-09 04:24:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15662 2025-05-09 07:01:38+00:00| published-proof-of-concept| Telegram/LmF-oJVU7SiGeaAkGTq-PJOHK6kdysB5ZubzAPJONfATA 2025-05-09 08:41:18+00:00| seen| https://t.me/cvedetector/24916...

SUSE CVE-2025-37814

In the Linux kernel, the following vulnerability has been resolved: tty: Require CAPSYSADMIN for all usages of TIOCLSELMOUSEREPORT This requirement was overeagerly loosened in commit 2f83e38a095f "tty: Permit some TIOCLSETSEL modes without CAPSYSADMIN", but as it turns out, 1 the logic I...

CVE-2025-3811

creationtimestamp| type| source ---|---|--- 2025-05-09 02:25:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15656 2025-05-09 04:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lopmefntwq2p 2025-05-09 05:01:06+00:00| seen|...

OSV-2025-348 Security exception in org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416302801 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT...