PT-2025-29131

Name of the Vulnerable Software and Affected Versions: liboqs versions prior to 0.14.0 Description: liboqs is a C-language cryptographic library providing post-quantum cryptography algorithm implementations. Secret-dependent branches were identified in the HQC key encapsulation mechanism referenc...

CVE-2025-38255

In the Linux kernel, the following vulnerability has been resolved: lib/groupcpus: fix NULL pointer dereference from groupcpusevenly While testing nullblk with configfs, echo 0 pollqueues will trigger following panic: BUG: kernel NULL pointer dereference, address: 0000000000000010 Oops: Oops: 000...

CVE-2025-38251

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clippush Blamed commit missed that vccdestroysocket calls clippush with a NULL skb. If clipdevs is NULL, clippush then crashes when reading skb-truesize...

RHSA-2025:10618 Red Hat Security Advisory: jq security update

Bulletin has no description...

CVE-2025-48384

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config entry, values with ...

PT-2025-28632 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: MediaWiki - CheckUser extension versions 1.39.X through 1.39.13 MediaWiki - CheckUser extension versions 1.42.X through 1.42.7 MediaWiki - CheckUser extension versions 1.43.X through 1.43.2 Description: The Special:CheckUser interface is...

CVE-2025-6714

MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server v7.0 prior to 7.0.20 and MongoDB Serve...

python311-Pillow-11.3.0-1.1 on GA media (moderate)

python311-Pillow-11.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15316-1 Rating: moderate Cross-References: CVE-2025-48379 CVSS scores: CVE-2025-48379 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-48379 SUSE : 8.4...

Mageia: Security Advisory (MGASA-2025-0202)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-29309 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A critical vulnerability exists in the Tenda FH1201. The fromRouteStatic function within the HTTP POST Request Handler, located in the file /goform/fromRouteStatic, is susceptible to a buffer overflo...

ovmf-202505-2.1 on GA media (moderate)

ovmf-202505-2.1 on GA media Announcement ID: openSUSE-SU-2025:15255-1 Rating: moderate Cross-References: CVE-2024-38797 CVE-2024-38805 CVSS scores: CVE-2024-38797 SUSE : 4.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2024-38797 SUSE : 5.1...

go1.24-1.24.4-1.1 on GA media (moderate)

go1.24-1.24.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15224-1 Rating: moderate Cross-References: CVE-2025-0913 CVE-2025-22874 CVE-2025-4673 CVSS scores: CVE-2025-0913 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2025-0913 SUSE : 6.8...

libwx_gtk2u_adv-suse16_0_0-3.2.8-4.1 on GA media (moderate)

libwxgtk2uadv-suse1600-3.2.8-4.1 on GA media Announcement ID: openSUSE-SU-2025:15309-1 Rating: moderate Cross-References: CVE-2024-58249 CVSS scores: CVE-2024-58249 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2024-58249 SUSE : 2.3...

kubernetes1.32-apiserver-1.32.6-1.1 on GA media (moderate)

kubernetes1.32-apiserver-1.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15236-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3...

python311-jupyter-core-5.8.1-1.1 on GA media (moderate)

python311-jupyter-core-5.8.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15272-1 Rating: moderate Cross-References: CVE-2025-30167 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

nova-3.11.4-1.1 on GA media (moderate)

nova-3.11.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15251-1 Rating: moderate Cross-References: CVE-2025-22874 CVSS scores: CVE-2025-22874 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-22874 SUSE : 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N...

CVE-2025-52496

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

CVE-2025-38183

creationtimestamp| type| source ---|---|--- 2025-07-04 14:36:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114795463565126368...

CVE-2025-38216

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 "iommu/vt-d: Add support for static identity domain" changed the context entry setup during domain attachment from a set-and-check policy to a...

CVE-2025-38208

In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automountfullpath page is checked for null in buildpathfromdentryoptionalprefix when tcon-originfullpath is not set. However, the check is missing when it is set. Add a check to prevent a potential...