AZL-58644 CVE-2025-24855 affecting package libxslt for versions less than 1.1.34-8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4...

CVE-2025-2117

creationtimestamp| type| source ---|---|--- 2025-03-09 08:38:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6961 2025-03-09 10:38:05+00:00| seen| Telegram/fsGqKV06VpR0bxSWxecnbwegtwThBTfbJKjUURkFe7hwZz6P 2025-03-09 10:59:53+00:00| seen|...

BIT-ELK-2025-25015 Kibana arbitrary code execution via prototype pollution

Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions = 8.15.0 and 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users tha...

SUSE CVE-2025-1922

Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-27657

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:23+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbo25g2e 2025-03-06 12:00:16+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzpjujf2u 2025-04-15 21:56:06+00:00| published-proof-of-concept...

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

CVE-2025-25015

CVE-2025-25015 – Kibana prototype pollution leading to arbitrary code execution . Affected: Kibana versions >= 8.15.0 and

Linux Distros Unpatched Vulnerability : CVE-2024-44966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix corruption when not offsetting data start Commit 04d82a6d0881 binfmtflat:...

CVE-2025-27425

creationtimestamp| type| source ---|---|--- 2025-03-04 14:06:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114104546018145703 2025-03-04 15:50:36+00:00| seen| https://t.me/cvedetector/19497 2025-08-19 13:26:45+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2025-27278

creationtimestamp| type| source ---|---|--- 2025-03-03 18:03:36+00:00| seen| https://t.me/cvedetector/19360 2025-03-03 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljikjrveuh2i 2025-08-19 13:26:46+00:00| seen| MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72...

CVE-2025-1873

CVE-2025-1873 affects 101news (version 1.0) with an SQL injection vulnerability in admin/contactus.php, specifically via the pagetitle and pagedescription parameters. The CVE entry is corroborated by multiple sources (NVD, RH advisory, CVE list, CIRCL sighting, and other feeds) confirming a high-...

CVE-2024-55064

CVE-2024-55064 concerns EasyVirt DC NetScope versions

CVE-2024-38290

The CVE-2024-38290 issue affects Extreme Networks’ XIQ-SE before 24.2.11, arising from a server misconfiguration that may allow user enumeration under specific conditions. Impact is limited to misconfiguration-driven exposure of usernames; no exploitation details are provided beyond this behavior...

UBUNTU-CVE-2022-49565

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...

CVE-2022-49546

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: fix memory leak of elf header buffer This is reported by kmemleak detector: unreferenced object 0xffffc900002a9000 size 4096: comm "kexec", pid 14950, jiffies 4295110793 age 373.951s hex dump first 32 bytes: 7f 45 4c 4...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from not maintaining the MSRRI setting when calling RTAS...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the improper application of the TSX quirk, which could result in an unchecked MSR access error...

CVE-2025-1067

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the fil...

openSUSE Security Advisory (SUSE-SU-2024:0893-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...