netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX

...

drm/amd/display: Skip pipe if the pipe idx not set properly

...

CVE-2025-55162

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0 through 1.33.6, 1.34.0 through 1.34.4 and 1.35.0, insufficient Session Expiration in the Envoy OAuth2 filter leads to failed logout operations. Whe...

CVE-2025-55852

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...

PT-2025-35775

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.06 Description: The Tenda AC8 version 16.03.34.06 is susceptible to a buffer overflow issue in the formWifiBasicSet function. The vulnerability is triggered through the security or security 5g parameter...

VulnCheck KEV: CVE-2023-32629

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...

Linux Distros Unpatched Vulnerability : CVE-2023-7152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function pollsetaddfd of t...

CVE-2025-8299

Realtek rtl81xx SDK Wi‑Fi Driver vulnerability CVE-2025-8299 affects MgntActSet_TEREDO_SET_RS_PACKET. Root cause: length validation missing when copying user-supplied data into a fixed‑length heap buffer, enabling a heap-based buffer overflow. Impact: local privilege escalation to SYSTEM; attacke...

CVE-2025-9813

CVE-2025-9813 affects Tenda CH22 1.0.0.1. The vulnerability is in the function formSetSambaConf of /goform/SetSambaConf, where manipulating the samba_userNameSda argument leads to a buffer overflow. Remote exploitation is possible, and exploits are publicly available per the sources. Remediation ...

glib: buffer overflow in set_connect_msg()

A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...

glib: buffer overflow in set_connect_msg()

A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...

glib: buffer overflow in set_connect_msg()

A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...

CVE-2025-50755

The CVE-2025-50755 entry concerns the Wavlink WN535K3 router (firmware version 20191010). A command injection flaw exists in the set_sys_cmd function via the command parameter, enabling attackers to execute arbitrary commands through a crafted request. The issue is treated across multiple feeds (...

PT-2025-35571

Name of the Vulnerable Software and Affected Versions: Wavlink WN535K3 version 20191010 Description: A command injection vulnerability exists in the set sys adm function of the Wavlink WN535K3 router. The vulnerability is triggered through manipulation of the username parameter, allowing attacker...

PT-2025-35570

Name of the Vulnerable Software and Affected Versions: Wavlink WN535K3 version 20191010 Description: The Wavlink WN535K3 router contains a command injection vulnerability in the set sys cmd function through the command parameter. This allows attackers to execute arbitrary commands via a crafted...

PT-2025-36565

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions prior to 250416 Description A command injection issue exists in the sub 415028 function within the /goform/set static leases endpoint. The flaw is caused by insufficient input validation of the Hostname variable. A...

CVE-2025-50757

Wavlink WN535K3 (version 20191010) is affected by a command-injection vulnerability in the set_sys_adm function triggered via the username parameter. The flaw enables attackers to execute arbitrary commands through a crafted request. CVSSv3.1 base score is 6.5 (Network, Low attack complexity, No ...

Linux Distros Unpatched Vulnerability : CVE-2022-50213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftables: do not allow SETID to refer to another table When doing lookups for sets on the same batch by using its ID, a set from a different table ca...

Linux Distros Unpatched Vulnerability : CVE-2025-38620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: zloop: fix KASAN use-after-free of tag set When a zoned loop device, or zloop device, is...

CVE-2025-50757

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...