54117 matches found
2026-01 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5073724)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2026-01 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5073722)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2026-20812 LDAP Tampering Vulnerability
...
DEBIAN-CVE-2025-68802
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit numsyncs to prevent oversized allocations The exec and vmbind ioctl allow userspace to specify an arbitrary numsyncs value. Without bounds checking, a very large numsyncs can force an excessively large allocation,...
CVE-2025-71099
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xeoaaddconfigioctl In xeoaaddconfigioctl, we accessed oaconfig-id after dropping metricslock. Since this lock protects the lifetime of oaconfig, an attacker could guess the id and call...
Use of a Broken or Risky Cryptographic Algorithm
Overview net.gleske:jervis is a Self service Jenkins job generation using Jenkins Job DSL plugin groovy scripts. Reads .jervis.yml and generates a job in Jenkins. Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm due to improper padding of SHA-25...
CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1
CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1. An upgraded version of the package is available that resolves this issue...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs updating a zero size range to the extent cache, which could cause the kernel to crash...
CVE-2025-68214 affecting package kernel for versions less than 6.6.119.3-1
CVE-2025-68214 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-40261 affecting package kernel for versions less than 6.6.119.3-1
CVE-2025-40261 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-68622
creationtimestamp| type| source ---|---|--- 2026-01-12 17:46:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcalv53xno2y...
[slackware-security] lcms2
New lcms2 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/lcms2-2.18-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Fix for 469 heap buffer overflow on convertutf16toutf32...
CVE-2023-25267
An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...
CVE-2023-25047
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3...
CVE-2023-25350
Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection...
CVE-2023-43298
An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43305
An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-29818
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin...