24131 matches found
CVE-2025-42706
CVE-2025-42706 describes a logic error in the Windows CrowdStrike Falcon Sensor that could allow an attacker with prior code execution on a host to delete arbitrary files. Affected software: Falcon Sensor for Windows (pre-7.24) and all Long Term Visibility sensors; fixes released for Windows 7.24...
open-vm-tools security update
An update is available for open-vm-tools. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Open Virtual Machine Tools are the open source implementation of t...
ALSA-2025:17558 Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping. Security Fixes: iputils: iputils integer overflow CVE-2025-48964 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE...
Moderate: iputils security update
The iputils packages contain basic utilities for monitoring a network, including ping. Security Fixes: iputils: iputils integer overflow CVE-2025-48964 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE...
OPENSUSE-SU-2025:15605-1 ansible-11-11.11.0-1.1 on GA media
These are all security issues fixed in the ansible-11-11.11.0-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2022-50536
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict redirection, the eval variable is assigned to SKREDIRECT after the applybytes data is sent, if msg has moredata, sockput will be called multip...
CVE-2025-61768
KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...
CLSA-2025-1759865619 openssl: Fix of CVE-2025-9230
CVE-2025-9230: fix incorrect check of unwrapped key size...
perl-JSON-XS security update
An update is available for perl-JSON-XS. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module converts Perl data structures to JSON and vice versa. Its...
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-15070073 fixes several issues. The following security issues were fixed: CVE-2025-38477: net/sched: schqfq: Fix race condition on qfqaggregate bsc1247315. CVE-2025-38089: sunrpc: handle SVCGARBAGE during svc auth processing as auth error bsc1245509. Patch...
AZL-76641 CVE-2023-53620 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in statusresync statusresync will calculate 'currresync - recoveryactive' to show user a progress bar like following: ============........ resync = 61.4% 'currresync' and 'recoveryactive' is updated in mddosyn...
CVE-2023-53679 wifi: mt7601u: fix an integer underflow
In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an integer underflow Fix an integer underflow that leads to a null pointer dereference in 'mt7601urxskbfromseg'. The variable 'dmalen' in the URB packet could be manipulated, which could trigger an integer...
CVE-2022-50546 ext4: fix uninititialized value in 'ext4_evict_inode'
In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninititialized value in 'ext4evictinode' Syzbot found the following issue: ===================================================== BUG: KMSAN: uninit-value in ext4evictinode+0xdd/0x26b0 fs/ext4/inode.c:180...
CVE-2022-50535
CVE-2022-50535 affects the Linux kernel DRM/AMD display code. It is a potential NULL pointer dereference in dm_resume within drm/amd/display, caused by assuming 'aconnector->dc_link' is non-null. The fix adds a null check at the loop's start to avoid dereferencing a NULL dc_link. Reported CVSS...
CVE-2023-53644 media: radio-shark: Add endpoint checks
In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the radio-shark2 driver: ------------ cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 3271 at...
CVE-2022-50524 iommu/mediatek: Check return value after calling platform_get_resource()
In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Check return value after calling platformgetresource platformgetresource may return NULL pointer, we need check its return value to avoid null-ptr-deref in resourcesize...
SUSE CVE-2023-53571
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intelgetcrtcnewencoder less oopsy The point of the WARN was to print something, not oops straight up. Currently that is precisely what happens if we can't find the connector for the crtc in the atomic state. Get th...
EUVD-2018-3767
Malware in sbrugna...