16955 matches found
BELL-CVE-2025-37859
Bulletin has no description...
OSV-2025-352 Use-of-uninitialized-value in JS_FreeRuntime
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416299802 Crash type: Use-of-uninitialized-value Crash state: JSFreeRuntime fuzzeval.c asyncfuncinit...
PT-2025-20641 · Unknown · Zylon Privategpt
Name of the Vulnerable Software and Affected Versions: Zylon PrivateGPT versions up to 0.6.2 Description: A problematic issue was found in Zylon PrivateGPT, affecting an unknown part of the file settings.yaml. The manipulation of the allow origins argument leads to a permissive cross-domain polic...
PT-2025-20644 · Gnu +1 · Gnu Pspp +1
Name of the Vulnerable Software and Affected Versions: GNU PSPP versions 2.0.1 and earlier Description: The issue allows attackers to cause an out-of-bounds read in spvxml-helpers.c spvxml parse attributes, related to extra content at the end of a document. Recommendations: For GNU PSPP versions...
PT-2025-20646
Name of the Vulnerable Software and Affected Versions Discord version 1.0.9188 Description A critical issue has been found in Discord, affecting some unknown functionality in the library WINSTA.dll. This issue leads to an uncontrolled search path. The attack must be approached locally and has a...
WordPress Ajar in5 Embed plugin <= 3.1.5 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by LVT-tholv2k in WordPress Plugin Ajar in5 Embed versions = 3.1.5...
CVE-2025-37888 net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...
CVE-2025-37874 net: ngbe: fix memory leak in ngbe_probe() error path
In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbeprobe error path When ngbeswinit is called, memory is allocated for wx-rsskey in wxinitrsskey. However, in ngbeprobe function, the subsequent error paths after ngbeswinit don't free the rsskey. F...
CVE-2025-37869 drm/xe: Use local fence in error path of xe_migrate_clear
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xemigrateclear The intent of the error path in xemigrateclear is to wait on locally generated fence and then return. The code is waiting on m-fence which could be the local fence but this ...
trailer mishandles allocating with a size of zero
lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...
BELL-CVE-2025-37817
Bulletin has no description...
BELL-CVE-2025-37828
Bulletin has no description...
BELL-CVE-2025-37824
Bulletin has no description...
BELL-CVE-2025-37826
Bulletin has no description...
BELL-CVE-2025-37831
Bulletin has no description...
BELL-CVE-2025-37806
Bulletin has no description...
BELL-CVE-2025-37804
Bulletin has no description...
BELL-CVE-2025-37823
Bulletin has no description...