83273 matches found
GitLab 15.4 < 18.0.5 / 18.1 < 18.1.3 / 18.2 < 18.2.1 (CVE-2025-1299)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing Authorization in GitLab CVE-2025-1299 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...
The vulnerability of the xmlSchematronFormatReport() function in the Schematron Schema Report component of the libxml2 library allows a attacker to trigger a service failure.
The vulnerability of the xmlSchematronFormatReport function in the Schematron Schema Report component of the libxml2 library is related to the use of a null pointer during the processing of XPath expressions. Exploiting this vulnerability could allow an attacker to cause service failures by sendi...
Security Bulletin: Vulnerability in org.apache.mina_mina-core affects IBM Db2 Data Management Console(CVE-2024-52046)
Summary org.apache.minamina-core dependency package is used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID:CVE-2024-52046 DESCRIPTION: The ObjectSerializationDecoder in Apache MINA uses Java’s native...
CVE-2025-47281 Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service
Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service DoS vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft...
CVE-2025-4700
creationtimestamp| type| source ---|---|--- 2025-07-23 20:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunugwa5aj2i 2025-07-25 03:38:54+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4r6l6lc2g...
CLSA-2025-1753298958 libxml2: Fix of 2 CVEs
CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...
CLSA-2025-1753298604 Fix CVE(s): CVE-2025-49794, CVE-2025-49796
SECURITY UPDATE: memory vulnerabilities in schematron - debian/patches/CVE-2025-49794CVE-2025-49796.patch: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements and memory corruption issue triggered by processing sch:name elements in input XML file - CVE-2025-49794 -...
CLSA-2025-1753298447 libxml2: Fix of 2 CVEs
CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...
CVE-2025-46686
creationtimestamp| type| source ---|---|--- 2025-07-23 18:33:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903980298033862 2025-07-23 21:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunwoinpsi2j...
CVE-2025-8069
creationtimestamp| type| source ---|---|--- 2025-07-23 18:29:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunnm4gsqv2w 2025-07-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-646/ 2025-07-24 10:21:06+00:00| seen|...
CVE-2025-46171
creationtimestamp| type| source ---|---|--- 2025-07-23 16:34:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903514963654205 2025-07-23 18:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luno66kqyw27...
CVE-2025-48932
creationtimestamp| type| source ---|---|--- 2025-07-23 10:13:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumruhat6b2v 2025-07-23 14:47:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d 2025-07-24 09:30:19+00:00| published-proof-of-concep...
CVE-2025-54442
creationtimestamp| type| source ---|---|--- 2025-07-23 07:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumjwdwqki2t 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-672/...
CVE-2025-54449
creationtimestamp| type| source ---|---|--- 2025-07-23 07:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumibo2x2q2h 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-665/...
CVE-2025-43489
creationtimestamp| type| source ---|---|--- 2025-07-23 04:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lum73g7h632h...
CVE-2025-8011
creationtimestamp| type| source ---|---|--- 2025-07-23 01:21:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulu6bzbzu2i 2025-07-23 07:43:00+00:00| seen| https://bsky.app/profile/ransomnews.online/post/3lumjhslkic23 2025-07-24 12:58:37+00:00| seen|...
kernel: ibmvnic: Use kernel helpers for hex dumps
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...
OSV-2025-570 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...
PT-2025-31717 · Git · Checkstyle
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...
PT-2025-33755
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The HID core is susceptible to a shift-out-of-bounds exception when converting a 32-bit quantity to a 0-bit quantity. This can occur due to buggy devices reporting a report field with ...