24871 matches found
CVE-2025-24796 Remote Code Execution within Collabora Online jail with Macros Enabled
Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...
CVE-2025-21833
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARNONONCE There is a WARNONONCE to catch an unlikely situation when domainremovedevpasid can't find the pasid. In case it nevertheless happens we must avoid using a NULL pointer...
DEBIAN-CVE-2025-21830
In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesystem e.g. bcachefs might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files...
CVE-2024-58070
CVE-2024-58070 : In the Linux kernel, the bpf_local_storage path could invoke sleep-unsafe allocations in PREEMPT_RT contexts. The root cause is that kmalloc(GFP_ATOMIC) remains unsafe in non-preemptible contexts under PREEMPT_RT, so the patch enforces using bpf_mem_alloc in bpf_local_storage whe...
CVE-2024-58064 wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in testcfg80211parsecolocatedap kunitkzalloc may return NULL, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for ies...
CVE-2024-58061
CVE-2024-58061 affects the Linux kernel wifi/mac80211 component. The issue arises when trying to deactivate all links via a debugfs write, where an internal WARN_ON is triggered and should have prevented deactivation; the patch fixes this to prohibit deactivating all links. This vulnerability is ...
CVE-2024-58061 wifi: mac80211: prohibit deactivating all links
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls this is a WARNON, but that should remain since internally we want to know about bugs that may cause this. Prevent deactivating all links in the debugf...
AZL-58067 CVE-2025-27516 affecting package nodejs for versions less than 20.14.0-7
Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the...
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
An oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends o...
CVE-2025-27094
Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute...
kernel: mm/swap: fix race when skipping swapcache
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache The Linux kernel CVE team has assigned CVE-2024-26759 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040304-CVE-2024-26759-45f1@gregkh/T...
Linux Distros Unpatched Vulnerability : CVE-2022-24769
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby Docker Engine prior to version...
RHEL 8 / 9 : OpenShift Container Platform 4.16.37 (RHSA-2025:1910)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1910 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
Linux Distros Unpatched Vulnerability : CVE-2022-49244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192mt6359devprobe The devicenode...
Linux Distros Unpatched Vulnerability : CVE-2024-41093
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using state-fb-obj0 directly,...
Linux Distros Unpatched Vulnerability : CVE-2022-48730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix potential spectre v1 gadget It appears like nr could be a Spectre v1...
CLSA-2025-1741126840 dhcp: Fix of CVE-2023-4408
CVE-2023-4408: use hashtable when parsing a message...
CVE-2025-27402
CVE-2025-27402 affects Tuleap, an open-source software lifecycle and collaboration suite. The vulnerability is a missing CSRF protection on tracker fields administrative operations, enabling an attacker to trick victims into removing or updating tracker fields. Affected code and impact are descri...
Linux Distros Unpatched Vulnerability : CVE-2012-2750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a Security Fix, aka Bug 59533. NOTE: this might be a...