Security Bulletin: Vulnerability in org.apache.mina_mina-core affects IBM Db2 Data Management Console(CVE-2024-52046)

Summary org.apache.minamina-core dependency package is used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID:CVE-2024-52046 DESCRIPTION: The ObjectSerializationDecoder in Apache MINA uses Java’s native...

CVE-2025-47281 Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service

Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service DoS vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft...

CVE-2025-4700

creationtimestamp| type| source ---|---|--- 2025-07-23 20:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunugwa5aj2i 2025-07-25 03:38:54+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4r6l6lc2g...

CLSA-2025-1753298958 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CLSA-2025-1753298604 Fix CVE(s): CVE-2025-49794, CVE-2025-49796

SECURITY UPDATE: memory vulnerabilities in schematron - debian/patches/CVE-2025-49794CVE-2025-49796.patch: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements and memory corruption issue triggered by processing sch:name elements in input XML file - CVE-2025-49794 -...

CLSA-2025-1753298447 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CVE-2025-46686

creationtimestamp| type| source ---|---|--- 2025-07-23 18:33:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903980298033862 2025-07-23 21:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunwoinpsi2j...

CVE-2025-8069

creationtimestamp| type| source ---|---|--- 2025-07-23 18:29:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunnm4gsqv2w 2025-07-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-646/ 2025-07-24 10:21:06+00:00| seen|...

CVE-2025-46171

creationtimestamp| type| source ---|---|--- 2025-07-23 16:34:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903514963654205 2025-07-23 18:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luno66kqyw27...

CVE-2025-48932

creationtimestamp| type| source ---|---|--- 2025-07-23 10:13:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumruhat6b2v 2025-07-23 14:47:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d 2025-07-24 09:30:19+00:00| published-proof-of-concep...

CVE-2025-54442

creationtimestamp| type| source ---|---|--- 2025-07-23 07:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumjwdwqki2t 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-672/...

CVE-2025-54449

creationtimestamp| type| source ---|---|--- 2025-07-23 07:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumibo2x2q2h 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-665/...

CVE-2025-43489

creationtimestamp| type| source ---|---|--- 2025-07-23 04:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lum73g7h632h...

CVE-2025-8011

creationtimestamp| type| source ---|---|--- 2025-07-23 01:21:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulu6bzbzu2i 2025-07-23 07:43:00+00:00| seen| https://bsky.app/profile/ransomnews.online/post/3lumjhslkic23 2025-07-24 12:58:37+00:00| seen|...

kernel: ibmvnic: Use kernel helpers for hex dumps

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...

OSV-2025-570 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

PT-2025-31717 · Git · Checkstyle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

PT-2025-33755

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The HID core is susceptible to a shift-out-of-bounds exception when converting a 32-bit quantity to a 0-bit quantity. This can occur due to buggy devices reporting a report field with ...

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes SQL Injection Vulnerability

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes is a plugin for bulk editing of WooCommerce product information, prices and attributes with support for Simple, Variant, External and Bundled products. WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes...

SUSE CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...