CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

CVE-2025-55138: Missing Critical Step in Authentication

LinkJoin through 882f196 mishandles token ownership in password reset...

CVE-2025-55137: Access of Resource Using Incompatible Type

LinkJoin through 882f196 mishandles lacks type checking in password reset...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

LinkJoin security vulnerability

LinkJoin is a virtual course and meeting software by the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196 that stems from improper handling of token ownership in the password reset feature...

Fixed in Apache Tomcat 10.1.44

Important: DoS in HTTP/2 due to client triggered stream reset CVE-2025-48989 Tomcat's HTTP/2 implementation was vulnerable to the made you reset attack. The denial of service typically manifested as an OutOfMemoryError. This was fixed with commit 73c04a10. This issue was reported to the ASF...

Linux Distros Unpatched Vulnerability : CVE-2024-26847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the...

CVE-2025-55138

LinkJoin through 882f196 mishandles token ownership in password reset...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

CVE-2025-55137

LinkJoin through 882f196 mishandles lacks type checking in password reset...

CVE-2025-55138

LinkJoin through 882f196 mishandles token ownership in password reset...

CVE-2025-55137

CVE-2025-55137 affects LinkJoin (versions up to and including 882f196). The vulnerability arises from lack of type checking in the password reset functionality, per multiple sources (CVE entry and Red Hat/CVE listings). Base metrics indicate CVSSv3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (base sco...

Linux Distros Unpatched Vulnerability : CVE-2021-39657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ufshcdehdeviceresethandler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure...

CVE-2025-48499

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP Internet Printing Protocol or LPD Line Printer Daemon packet may cause a denial-of-service DoS condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service D...

Linux Distros Unpatched Vulnerability : CVE-2024-35994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes It turns out that while...

PT-2025-35993

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the hibmcge netdev within the Linux kernel. The hibmcge driver acquires the rtnl lock in pci error handlers.reset prepare and releases it in pci error...

Fixed in Apache Tomcat 9.0.108

Important: DoS in HTTP/2 due to client triggered stream reset CVE-2025-48989 Tomcat's HTTP/2 implementation was vulnerable to the made you reset attack. The denial of service typically manifested as an OutOfMemoryError. This was fixed with commit f36b8a4e. This issue was reported to the ASF...

Fixed in Apache Tomcat 11.0.10

Important: DoS in HTTP/2 due to client triggered stream reset CVE-2025-48989 Tomcat's HTTP/2 implementation was vulnerable to the made you reset attack. The denial of service typically manifested as an OutOfMemoryError. This was fixed with commit f362c8eb. This issue was reported to the ASF...

CVE-2025-54879: Allocation of Resources Without Limits or Throttling

Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication. In versions 3.1.5 through 4.2.24, 4.3.0 through 4.3.11 and 4.4.0 through 4.4.3, Mastodon's rate-limiting system has a critical configuration error where the...

Linux Distros Unpatched Vulnerability : CVE-2025-38091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get planeid Why & How Fix a false positive...