9219 matches found
CVE-2025-71136
In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842cplogstatus It's possible for cpread and hdmiread to return -EIO. Those values are further used as indexes for accessing arrays. Fix that by checking return...
CVE-2025-71106
A logic error was found in the Linux kernel's power management filesystem freeze callback. The freezeallptr check in filesystemsfreezecallback has reversed logic, causing all filesystems to be frozen when filesystemfreezeenabled is false the opposite of intended behavior. This triggers WARNONONCE...
CVE-2025-14556
creationtimestamp| type| source ---|---|--- 2026-01-14 20:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfurbfs5o2q 2026-01-15 08:21:13+00:00| seen| https://gist.github.com/Darkcrai86/9648acbcf4ae04b18090701ad79d5a91...
CVE-2025-71121
In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old variant of the GSP chip and is used e.g. in HP 730 workstations. When trying to reprogram the affinity it will crash with a HPMC as the relevant registers...
CVE-2026-22853
creationtimestamp| type| source ---|---|--- 2026-01-14 19:42:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcftanbxqw2c...
CVE-2023-37369
creationtimestamp| type| source ---|---|--- 2026-01-14 19:38:38+00:00| seen| https://gist.github.com/jakirkham/b16b96bb6b20b7a5405e686931fd28cd...
EUVD-2026-2442
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...
CVE-2025-71108
A firmware compatibility issue was found in the Linux kernel's USB Type-C UCSI driver. The UCSI specification defines numconnectors as a 7-bit field with the 8th bit reserved. Some buggy firmware incorrectly sets this reserved bit, causing the driver to interpret an invalid connector count. This...
CVE-2025-71110
creationtimestamp| type| source ---|---|--- 2026-01-14 16:44:36+00:00| seen| https://gist.github.com/Darkcrai86/8ed055ed8d2ae04b98c7069673f174e3 2026-01-15 10:08:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115898560768569303...
EUVD-2026-2458
A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby...
EUVD-2026-2457
TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the printfUART formatted output implementation used within the ZigBee / IEEE 802.15.4 networking stack. The implementation formats output into a fixed-size global buffer and concatenates strings for %s...
DEBIAN-CVE-2025-71138
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost always in dpuencoderphyswbsetupctl, but in a single place the check is missing. Also use convenient locals instead of physenc- where availabl...
EUVD-2026-2480
In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the...
EUVD-2026-2499
In the Linux kernel, the following vulnerability has been resolved: um: init cputasks earlier This is currently done in umlfinishsetup, but e.g. with KCOV enabled we'll crash because some init code can call into e.g. memparse, which has coverage annotations, and then the checks in checkkcovmode...
EUVD-2026-2503
In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in deferfree before accessing freed memory When CONFIGSLUBTINY is enabled, kfreenolock calls kasanslabfree before deferfree. On ARM64 with MTE Memory Tagging Extension, kasanslabfree poisons the memory an...
EUVD-2026-2511
In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpcreglist when not declared On plaforms with an a7xx GPU not supporting IFPC, the ifpcreglist if still deferenced in a7xxpatchpwrupreglist which causes a kernel crash: Unable to handle kernel NU...
EUVD-2026-2469
The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable users API to retrieve the...
EUVD-2026-2464
The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with admin privileges. Successful...