PT-2026-4489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s Network File System daemon nfsd is susceptible to a server crash when attempting to unlock the filesystem through an administrative interface while nfsd is not running...

CVE-2025-14711

creationtimestamp| type| source ---|---|--- 2025-12-14 20:18:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115719765309665560...

CVE-2025-14620

creationtimestamp| type| source ---|---|--- 2025-12-14 15:33:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115718644313763486...

CVE-2025-12696

creationtimestamp| type| source ---|---|--- 2025-12-14 07:03:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/115716641088388737 2025-12-15 08:50:48+00:00| seen| https://gist.github.com/Darkcrai86/2828734cda9ac44bdac5a22dde4d38bd...

CVE-2025-13126

creationtimestamp| type| source ---|---|--- 2025-12-14 05:33:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/115716287777794541 2025-12-14 15:08:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115718546319246765 2025-12-15 08:51:36+00:00| seen|...

EUVD-2025-203193

Not used...

CVE-2025-14454

creationtimestamp| type| source ---|---|--- 2025-12-13 07:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u3tihnp32x...

CVE-2025-12512

creationtimestamp| type| source ---|---|--- 2025-12-13 07:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u2kaqva722...

EUVD-2025-203178

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-67500

Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request...

CVE-2025-65530

creationtimestamp| type| source ---|---|--- 2025-12-12 19:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7std6b6aw2r 2026-01-07 00:07:35+00:00| seen| https://gist.github.com/aleksejspopovs/a5f757871c6bd16fab471e5cdd231061 2026-01-09 12:34:22+00:00| seen|...

CVE-2025-67344

creationtimestamp| type| source ---|---|--- 2025-12-12 19:21:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sspr7l6e2r...

UBUNTU-CVE-2025-40345

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

CVE-2025-40345 usb: storage: sddr55: Reject out-of-bound new_pba

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

CVE-2025-40345 usb: storage: sddr55: Reject out-of-bound new_pba

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

CVE-2025-36746

creationtimestamp| type| source ---|---|--- 2025-12-12 16:58:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115707654519020548...

CVE-2025-36744

creationtimestamp| type| source ---|---|--- 2025-12-12 16:58:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115707654519020548...

CVE-2025-11266

creationtimestamp| type| source ---|---|--- 2025-12-12 12:57:03+00:00| seen| https://infosec.exchange/users/morgenm/statuses/115706706172988875...

CVE-2025-13850

creationtimestamp| type| source ---|---|--- 2025-12-12 08:15:03+00:00| seen| https://gist.github.com/Darkcrai86/cc3b47fe3a8d5d403322fe98a66ef0f6...

HTTP Header Injection

Overview tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. Affected versions of this package are vulnerable to HTTP Header Injection via the reason argument in HTTP status handling. An attacker can inject arbitrary HTTP headers or execute...