13073 matches found
CVE-2025-38082 gpio: virtuser: fix potential out-of-bound write
In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix potential out-of-bound write If the caller wrote more characters, count is truncated to the max available space in "simplewritetobuffer". Check that the input size does not exceed the buffer size. Write a zero...
CVE-2025-38080 drm/amd/display: Increase block_sequence array size
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase blocksequence array size Why It's possible to generate more than 50 steps in hwssbuildfastsequence, for example with a 6-pipe asic where all pipes are in one MPC chain. This overflows the blocksequence...
BELL-CVE-2025-49176
Bulletin has no description...
BELL-CVE-2025-49179
Bulletin has no description...
BELL-CVE-2025-49175
Bulletin has no description...
MAL-2025-5461 Malicious code in sparemanager (npm)
The package communicates with a domain associated with malicious activity...
CGA-3H3V-RXHR-WQM7
Bulletin has no description...
Withdrawn Advisory: microlight.js has a null pointer dereference vulnerability
Withdrawn Advisory This advisory has been withdrawn because a website owner has to set CSS color values. The proof of concept doesn't demonstrate how a malicious user who is not the website owner can cause an application crash. This link has been maintained to preserve external references. Origin...
MAL-2025-5065 Malicious code in voicebuilder_ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CGA-V63M-XHMR-8H8M
Bulletin has no description...
CGA-X6MW-C467-JJFX
Bulletin has no description...
CGA-X9JP-9JPR-X355
Bulletin has no description...
CGA-3JW4-MH9F-J7XP
Bulletin has no description...
GHSA-7PR5-W74R-JJJ7 Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function
Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting XSS vulnerability in the admin interface. The vulnerability exists in the "displayablelinksjs" function, which fails to properly sanitize blog post titles before including them in JSON responses served via...
CGA-MJG9-H2JR-FQRQ
Bulletin has no description...
CGA-W658-2VV8-4QMJ
Bulletin has no description...
CGA-MQCQ-4VJ8-J6R4
Bulletin has no description...
RHSA-2025:9162 Red Hat Security Advisory: gimp security update
Bulletin has no description...