Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential deadlock on exfatgetdentryset CVE-2024-42315 In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to avoid deadlock...

CVE-2025-21545

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch. Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools version 8.60 and 8.61. An attacker who exploits th...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Web Threat Defense User Service. An attacker could exploit the vulnerability to obtain sensitive information. The following products a...

SUSE CVE-2024-57878

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NTARMFPMR Currently fpmrset doesn't initialize the temporary 'fpmr' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the KVM incorrectly using is64bitmode instead of is64bithypercall to detect 64-bit hypercalls when handling...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in ptrace for the ARM64 architecture that fails to initialize the temporary variable ctrl when processing...

CVE-2024-56785 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a

In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning interruptprovider: /bus@10000000/pci@1a000000: 'interrupt-cells' found, but node is n...

UBUNTU-CVE-2024-56768

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpfgetsmpprocessorid on !CONFIGSMP On x86-64 calling bpfgetsmpprocessorid in a kernel with CONFIGSMP disabled can trigger the following bug, as pcpuhot is unavailable: 8.471774 BUG: unable to handle page fault for addres...

PT-2025-34431

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the cpu switch to and call on irq stack functions related to stack manipulation and the Shadow Call Stack. Interruptions during stack changes can le...

PT-2025-34646 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 libbiosig Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

PT-2025-34645 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

DEBIAN-CVE-2024-53161

In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info" SMC call consists of memctrlidx left-shifted 16 bits and OR-ed with DIMM index. With memctrlidx defined as 32-bits wide the left-shift...

MGASA-2024-0393 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.65 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

CVE-2023-28168 WordPress WordPress Console plugin <= 0.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Console: from n/a through 0.3.9...

The vulnerability of the ecryptfs component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the ecryptfs component in the Linux operating system’s kernel is related to an operation that goes beyond the buffer boundaries in the memory, within the function writetag66packet. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Telephony Agent component in the AlarmWorX Multimedia SCADA system GENESIS64 software package for monitoring alarm signals, along with the MC Works64 software packages for dispatch control and data collection, allows a intruder to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the Telephony Agent component in the AlarmWorX Multimedia SCADA system of GENESIS64, as well as the software packages for monitoring and data collection of MC Works64, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attacke...

Malicious code in internallib_v268 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0751f153f42313bbb9eca09f12c8ef03953b365e3670c380b17c909d1f9d8c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DataGear 注入漏洞

DataGear is an open source and free data visualization and analysis platform from DataGear, Inc. An injection vulnerability exists in DataGear version 4.60 and earlier versions, which stems from an incorrect manipulation of the parameter sql that can lead to sql injection...

Wangtai idcCMS 安全漏洞

Wangtai idcCMS is a cloud management agent system from China Nettai Wangtai. A security vulnerability exists in Wangtai idcCMS version 1.60, which stems from improper manipulation of the parameter idName and can lead to cross-site scripting attacks...