OSV-2025-357 Segv on unknown address in pcpp::Packet::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416808618 Crash type: Segv on unknown address Crash state: pcpp::Packet::computeCalculateFields FuzzTarget.cpp...

openSUSE Security Advisory (SUSE-SU-2025:1523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-20689

Name of the Vulnerable Software and Affected Versions open-vm-tools versions prior to 13.0.5-alt1 open-vm-tools versions 12.5.2 Description The Open Virtual Machine Tools contain an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper...

IBM Jazz Reporting Service Code Issue Vulnerability

IBM Jazz Reporting Service is a suite of ready-to-use reporting components from International Business Machines IBM. The product includes features such as report generation, data collection and lifecycle queries. A code issue vulnerability exists in IBM Jazz Reporting Service that stems from a...

CVE-2025-4536

creationtimestamp| type| source ---|---|--- 2025-05-11 10:13:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lov5sjeuv3s2 2025-05-11 12:37:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lovhuwiqjl2l 2025-05-11...

CVE-2025-4530

creationtimestamp| type| source ---|---|--- 2025-05-11 05:28:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15920 2025-05-11 08:37:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hg6ti72t 2025-05-11 10:00:39+00:00| seen|...

OSV-2025-354 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416762645 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...

PT-2025-21908 · Git +1 · Checkstyle

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: The software experiences a security exception during the parsing of Java statements within the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement function. The cra...

CVE-2025-4506

creationtimestamp| type| source ---|---|--- 2025-05-10 16:36:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15899 2025-05-10 18:30:33+00:00| published-proof-of-concept| Telegram/5jCfy6rNIkT2KBC1Y0rQEULebmDfmr-lomqeEJy5sudorr4 2025-05-10 18:37:29+00:00| seen|...

CVE-2025-4498

creationtimestamp| type| source ---|---|--- 2025-05-10 10:19:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lospphwr3tp2 2025-05-10 10:26:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15887 2025-05-10...

OSV-2025-352 Use-of-uninitialized-value in JS_FreeRuntime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416299802 Crash type: Use-of-uninitialized-value Crash state: JSFreeRuntime fuzzeval.c asyncfuncinit...

PT-2025-21907 · Git +1 · Quickjs

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a use-of-uninitialized-value issue. The crash state involves JS FreeRuntime, occurring within fuzz eval.c during async func init...

CVE-2025-3794

creationtimestamp| type| source ---|---|--- 2025-05-09 23:25:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15857 2025-05-10 00:05:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lormmzq2ajr2 2025-05-10 02:31:40+00:00| seen|...

CVE-2024-25652

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE with access to the Report functionality to gain unauthorized access to remote sessions created by legitimate users through...

CVE-2025-4485

creationtimestamp| type| source ---|---|--- 2025-05-09 19:26:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15818 2025-05-09 22:01:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lor7knkrjsd2 2025-05-09...

CVE-2024-13964

creationtimestamp| type| source ---|---|--- 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-17 21:07:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bf5yz2t...

CVE-2024-13944

creationtimestamp| type| source ---|---|--- 2025-05-09 16:05:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqsk5kkdag2 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-09...

CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

DEBIAN-CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

UBUNTU-CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...