CVE-2025-13635 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6JXR-VC7P-9HQV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X93G-7WJC-5JQW vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-64715 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GHSA-QPXX-2FWX-F5QJ vulnerabilities

Vulnerabilities for packages: pgbouncer...

The vulnerability of the `ospf_te_parse_te()` function in the `ospfd/ospf_te.c` file of the networking routing implementation software for Unix-like systems allows a hacker to cause a service failure.

The vulnerability of the ospfteparsete function in the ospfd/ospfte.c file of the networking routing implementation software for Unix-like systems is related to incorrect validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2024-37048)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Qnap QTS and QuTS hero Improper Certificate Validation (CVE-2024-48865)

An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow attackers with local network access to compromise the security of the system. We have already fixed the vulnerability in the following...

Stealth and Evasion in Rogue AP Attacks: An Analysis of Modern Detection and Bypass Techniques

Wireless networks act as the backbone of modern digital connectivity, making them a primary target for cyber adversaries. Rogue Access Point attacks, specifically the Evil Twin variant, enable attackers to clone legitimate wireless network identifiers to deceive users into connecting. Once a...

Linux Distros Unpatched Vulnerability : CVE-2025-67477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is...

The vulnerability of the WebKit component in the Safari browser on iOS operating systems, including iPadOS, watchOS, iOS, iPadOS, tvOS, visionOS, and MacOS, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebKit component in the Safari browser on operating systems such as watchOS, iOS, iPadOS, tvOS, and visionOS is related to insufficient input validation. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility...

CVE-2025-66628

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM PSX TIM image parser contains a critical integer overflow vulnerability in its ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file...

CVE-2025-66628

CVE-2025-66628 affects ImageMagick’s TIM image parser (ReadTIMImage in coders/tim.c). In versions up to 7.1.2-9, width/height are read as 16-bit values and image_size = 2 * width * height can overflow on 32-bit systems, causing a small heap allocation and enabling an out-of-bounds read. This is m...

CVE-2023-53774

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk record...

CVE-2025-12084 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-12084 vulnerabilities

Vulnerabilities for packages: python...

CVE-2023-53755

AMD PTDMA Pass-Through DMA engine crashes the kernel when ptissuepending encounters empty descriptor queues. The function blindly invokes ptcmdcallback without verifying that a valid descriptor exists, triggering a NULL pointer dereference. This commonly surfaces during system shutdown on AMD...

CVE-2025-14087

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: falcoctl, skaffold, sigstore-scaffolding, policy-controller, ko, ratify, crossplane, gh, gitsign, zarf, cosign, flux-source-controller, goreleaser, aactl, tkn, kyverno, docker-cli-buildx, neuvector-sigstore-interface, kyverno-notation-aws, vexctl, witness, kubescape,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: spire-server, kyverno-fips, ko, sigstore-scaffolding, tflint-fips, teleport, skaffold, gh, skaffold-fips, ratify-fips, gitsign, tekton-chains-fips, neuvector-sigstore-interface, kyverno-notation-aws-fips, zarf, kubescape, kyverno,...