27235 matches found
CVE-2025-64899
creationtimestamp| type| source ---|---|--- 2025-12-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1043/ 2025-12-09 23:39:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lpqfodlg2c 2025-12-10 13:40:32+00:00| seen|...
EUVD-2022-55707
In the Linux kernel, the following vulnerability has been resolved: power: supply: adp5061: fix out-of-bounds read in adp5061getchgtype ADP5061CHGSTATUS1CHGSTATUS is masked with 0x07, which means a length of 8, but adp5061chgtype array size is 4, may end up reading 4 elements beyond the end of th...
CVE-2023-53847 usb-storage: alauda: Fix uninit-value in alauda_check_media()
In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Fix uninit-value in alaudacheckmedia Syzbot got KMSAN to complain about access to an uninitialized value in the alauda subdriver of usb-storage: BUG: KMSAN: uninit-value in alaudatransport+0x462/0x57f0...
CVE-2023-53820 loop: loop_set_status_from_info() check before assignment
In the Linux kernel, the following vulnerability has been resolved: loop: loopsetstatusfrominfo check before assignment In loopsetstatusfrominfo, lo-looffset and lo-losizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed t...
CVE-2023-53820 loop: loop_set_status_from_info() check before assignment
In the Linux kernel, the following vulnerability has been resolved: loop: loopsetstatusfrominfo check before assignment In loopsetstatusfrominfo, lo-looffset and lo-losizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed t...
DEBIAN-CVE-2022-50638
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch caused by bad boot loader inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:203! invalid opcode: 0000 1 PREEMP...
CVE-2022-50649
CVE-2022-50649 affects the Linux kernel power: supply adp5061 code path. The issue is a bounds read in adp5061_get_chg_type(): ADP5061_CHG_STATUS_1_CHG_STATUS is masked with 0x07, implying a length of 8, but the adp5061_chg_type array size is 4. This can cause reading beyond the end of the adp506...
CVE-2022-50638
CVE-2022-50638 (Linux kernel) concerns an ext4 bug_on due to a boot loader inode corruption during ioctl-based swap of boot loader inodes, causing a kernel BUG in ext4_es_end via ext4 extents logic. The issue is triggered when boot loader inode is invalid or not a normal file (S_IFREG) and extent...
CVE-2022-50638
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch caused by bad boot loader inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:203! invalid opcode: 0000 1 PREEMP...
CVE-2025-65572
A Cross-Site Scripting (XSS) vulnerability exists in AllskyTeam AllSky v2024.12.06_06 . The flaw is triggered via the config , filename , or extratext parameters in the allskySettings.php file. When the page is accessed or reloaded, the showMessages() function in status_messages.php prints error ...
PT-2025-50292
Name of the Vulnerable Software and Affected Versions Mastodon versions 4.2.27 and prior Mastodon versions 4.3.0-beta.1 through 4.3.14 Mastodon versions 4.4.0-beta.1 through 4.4.9 Mastodon versions 4.5.0-beta.1 through 4.5.2 Description Mastodon, a free and open-source social network server based...
CVE-2025-65573
Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...
CVE-2025-65573
Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...
Linux Distros Unpatched Vulnerability : CVE-2025-40340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kern...
GHSA-WPQC-H9WP-CHMQ
creationtimestamp| type| source ---|---|--- 2025-12-08 23:41:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115686590469006989...
CVE-2023-53752
In the Linux kernel, the following vulnerability has been resolved: net: deal with integer overflows in kmallocreserve Blamed commit changed: ptr = kmallocsize; if ptr size = ksizeptr; size = kmallocsizeroundupsize; ptr = kmallocsize; This allowed various crash as reported by syzbot 1 and Kyle...
CVE-2025-65231
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...
CVE-2025-65804
creationtimestamp| type| source ---|---|--- 2025-12-08 17:46:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115685195052401612 2025-12-08 19:52:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7iskxtus72x...