PT-2026-22003

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.8 FreeRDP versions prior to 3.23.0 Description FreeRDP, a free implementation of the Remote Desktop Protocol, contains an out-of-bounds read issue in the FreeRDP client’s RDPGFX channel. A malicious RDP server ca...

Fedora 42 : golang-github-google-wire (2025-f8e5522ee0)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f8e5522ee0 advisory. Rebuilt for CVE-2025-47906 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CVE-2022-50847

CVE-2022-50847 is a Linux kernel vulnerability affecting the DRM bridge for it6505. The issue occurs when the HPD interrupt fires before the DRM subsystem has registered it6505 as a DRM bridge, causing the driver to access the AUX channel and trigger a NULL pointer dereference. The documented fix...

CVE-2025-66203

creationtimestamp| type| source ---|---|--- 2025-12-27 00:05:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/115788606687747874 2025-12-27 00:05:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mawj4af7kz2f 2025-12-27 00:44:21+00:00| seen|...

CVE-2025-67015

creationtimestamp| type| source ---|---|--- 2025-12-26 17:44:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mavttanbel22 2025-12-26 18:35:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mavwo7ogj722 2026-01-02 15:08:07+00:00| published-proof-of-concept|...

CVE-2025-15090

creationtimestamp| type| source ---|---|--- 2025-12-25 23:26:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwhvvvt72b 2025-12-25 23:28:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwkiusb42u 2025-12-26 01:02:07+00:00| seen|...

SUSE CVE-2023-54066

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861i2cmasterxfer In gl861i2cmasterxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally...

CVE-2025-8769

creationtimestamp| type| source ---|---|--- 2025-12-24 21:46:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maragn7soj2z 2025-12-24 22:42:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mardjqwdvt2q 2025-12-25 00:06:44+00:00| seen|...

CVE-2019-25243

creationtimestamp| type| source ---|---|--- 2025-12-24 20:25:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3v75iw32t 2025-12-24 20:26:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mar3vxv4mh2g...

CVE-2022-50759

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5648: Free V4L2 fwnode data on unbind The V4L2 fwnode data structure doesn't get freed on unbind, which leads to a memleak...

CVE-2023-54066 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861i2cmasterxfer In gl861i2cmasterxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally...

CVE-2025-66444

creationtimestamp| type| source ---|---|--- 2025-12-24 05:45:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mapkp5z6hz2p 2025-12-24 07:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mappcdfirb2y...

CVE-2025-68664

creationtimestamp| type| source ---|---|--- 2025-12-23 23:44:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maowjvnaam2p 2025-12-24 01:35:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115771971926680769 2025-12-24 01:35:01+00:00| seen|...

CVE-2023-53951

creationtimestamp| type| source ---|---|--- 2025-12-21 22:18:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majqsyupih2p...

SUSE-SU-2025:4444-1 Security update 5.1.1.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client version 11.5.10 bsc1254113 CVE-2025-47911: Fixed parsing HTML documents version 11.5.10...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991281 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: ismt: Fix an out-of-bounds bug in ismtaccess When the driver does not check the data from th...

CVE-2025-68222

In the Linux kernel, the following vulnerability has been resolved: pinctrl: s32cc: fix uninitialized memory in s32pinctrldesc s32pinctrldesc is allocated with devmkmalloc, but not all of its fields are initialized. Notably, numcustomparams is used in pinconfgenericparsedtconfig, resulting in...

CVE-2025-36753

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

PT-2025-51202

Name of the Vulnerable Software and Affected Versions Shiguangwu sgwbox N3 version 2.0.25 Description A buffer overflow weakness exists in the file /usr/sbin/http eshell server of the WIREDCFGGET Interface component. Manipulation of the params argument can trigger this issue, potentially allowing...

EUVD-2025-203255

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...