Search CVE reports

41 – 50 of 25323 results

Detailed view

Sort by:

Status is adjusted based on your filters.

CVE-2025-23165

Medium priority

Needs evaluation

[Corrupted pointer in node::fs::ReadFileUtf8(const FunctionCallbackInfo<Value>& args) when args[0] is a string]

1 affected package

nodejs

Package	24.04 LTS
nodejs	Needs evaluation

In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero,...

132 affected packages

linux, linux-allwinner-5.19, linux-aws, linux-aws-5.0, linux-aws-5.11...

Package	24.04 LTS
linux	Needs evaluation
linux-allwinner-5.19	Not in release
linux-aws	Needs evaluation
linux-aws-5.0	Not in release
linux-aws-5.11	Not in release
linux-aws-5.13	Not in release
linux-aws-5.15	Not in release
linux-aws-5.19	Not in release
linux-aws-5.3	Not in release
linux-aws-5.4	Not in release
linux-aws-5.8	Not in release
linux-aws-6.2	Not in release
linux-aws-6.5	Not in release
linux-aws-6.8	Not in release
linux-aws-fips	Not in release
linux-aws-hwe	Not in release
linux-azure	Needs evaluation
linux-azure-4.15	Not in release
linux-azure-5.11	Not in release
linux-azure-5.13	Not in release
linux-azure-5.15	Not in release
linux-azure-5.19	Not in release
linux-azure-5.3	Not in release
linux-azure-5.4	Not in release
linux-azure-5.8	Not in release
linux-azure-6.11	Needs evaluation
linux-azure-6.2	Not in release
linux-azure-6.5	Not in release
linux-azure-6.8	Not in release
linux-azure-edge	Not in release
linux-azure-fde	Not in release
linux-azure-fde-5.15	Not in release
linux-azure-fde-5.19	Not in release
linux-azure-fde-6.2	Not in release
linux-azure-fips	Not in release
linux-azure-nvidia	Needs evaluation
linux-bluefield	Not in release
linux-fips	Not in release
linux-gcp	Needs evaluation
linux-gcp-4.15	Not in release
linux-gcp-5.11	Not in release
linux-gcp-5.13	Not in release
linux-gcp-5.15	Not in release
linux-gcp-5.19	Not in release
linux-gcp-5.3	Not in release
linux-gcp-5.4	Not in release
linux-gcp-5.8	Not in release
linux-gcp-6.11	Needs evaluation
linux-gcp-6.2	Not in release
linux-gcp-6.5	Not in release
linux-gcp-6.8	Not in release
linux-gcp-fips	Not in release
linux-gke	Needs evaluation
linux-gke-4.15	Not in release
linux-gke-5.15	Not in release
linux-gke-5.4	Not in release
linux-gkeop	Needs evaluation
linux-gkeop-5.15	Not in release
linux-gkeop-5.4	Not in release
linux-hwe	Not in release
linux-hwe-5.11	Not in release
linux-hwe-5.13	Not in release
linux-hwe-5.15	Not in release
linux-hwe-5.19	Not in release
linux-hwe-5.4	Not in release
linux-hwe-5.8	Not in release
linux-hwe-6.11	Needs evaluation
linux-hwe-6.2	Not in release
linux-hwe-6.5	Not in release
linux-hwe-6.8	Not in release
linux-hwe-edge	Not in release
linux-ibm	Needs evaluation
linux-ibm-5.15	Not in release
linux-ibm-5.4	Not in release
linux-intel-5.13	Not in release
linux-intel-iot-realtime	Not in release
linux-intel-iotg	Not in release
linux-intel-iotg-5.15	Not in release
linux-iot	Not in release
linux-kvm	Not in release
linux-lowlatency	Needs evaluation
linux-lowlatency-hwe-5.15	Not in release
linux-lowlatency-hwe-5.19	Not in release
linux-lowlatency-hwe-6.11	Needs evaluation
linux-lowlatency-hwe-6.2	Not in release
linux-lowlatency-hwe-6.5	Not in release
linux-lowlatency-hwe-6.8	Not in release
linux-lts-xenial	Not in release
linux-nvidia	Needs evaluation
linux-nvidia-6.2	Not in release
linux-nvidia-6.5	Not in release
linux-nvidia-6.8	Not in release
linux-nvidia-lowlatency	Needs evaluation
linux-nvidia-tegra	Needs evaluation
linux-nvidia-tegra-igx	Not in release
linux-oem	Not in release
linux-oem-5.10	Not in release
linux-oem-5.13	Not in release
linux-oem-5.14	Not in release
linux-oem-5.17	Not in release
linux-oem-5.6	Not in release
linux-oem-6.0	Not in release
linux-oem-6.1	Not in release
linux-oem-6.11	Needs evaluation
linux-oem-6.5	Not in release
linux-oem-6.8	Needs evaluation
linux-oracle	Needs evaluation
linux-oracle-5.0	Not in release
linux-oracle-5.11	Not in release
linux-oracle-5.13	Not in release
linux-oracle-5.15	Not in release
linux-oracle-5.3	Not in release
linux-oracle-5.4	Not in release
linux-oracle-5.8	Not in release
linux-oracle-6.5	Not in release
linux-oracle-6.8	Not in release
linux-raspi	Needs evaluation
linux-raspi-5.4	Not in release
linux-raspi-realtime	Needs evaluation
linux-raspi2	Not in release
linux-realtime	Needs evaluation
linux-riscv	Needs evaluation
linux-riscv-5.11	Not in release
linux-riscv-5.15	Not in release
linux-riscv-5.19	Not in release
linux-riscv-5.8	Not in release
linux-riscv-6.5	Not in release
linux-riscv-6.8	Not in release
linux-starfive-5.19	Not in release
linux-starfive-6.2	Not in release
linux-starfive-6.5	Not in release
linux-xilinx-zynqmp	Not in release

CVE-2025-47905

Medium priority

Needs evaluation

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries.

1 affected package

varnish

Package	24.04 LTS
varnish	Needs evaluation

CVE-2025-4574

Medium priority

Needs evaluation

In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

1 affected package

rust-crossbeam-channel

Package	24.04 LTS
rust-crossbeam-channel	Needs evaluation

CVE-2025-20623

Medium priority

Needs evaluation

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (10th Generation) may allow an authenticated user to potentially enable...

1 affected package

intel-microcode

Package	24.04 LTS
intel-microcode	Needs evaluation

CVE-2025-20103

Medium priority

Needs evaluation

Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

1 affected package

intel-microcode

Package	24.04 LTS
intel-microcode	Needs evaluation

CVE-2025-20054

Medium priority

Needs evaluation

Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

1 affected package

intel-microcode

Package	24.04 LTS
intel-microcode	Needs evaluation

CVE-2024-45332

Medium priority

Needs evaluation

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user...

1 affected package

intel-microcode

Package	24.04 LTS
intel-microcode	Needs evaluation

CVE-2024-43420

Medium priority

Needs evaluation

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information...

1 affected package

intel-microcode

Package	24.04 LTS
intel-microcode	Needs evaluation

CVE-2025-4658

Medium priority

Not in release

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication,...

1 affected package

opkssh

Package	24.04 LTS
opkssh	Not in release

Export to JSON

Results by page: