PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 14

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 14 / 82

  1. CVE-2025-61021virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements
  2. CVE-2025-61020virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements
  3. CVE-2025-61019virtuoso-opensource: virtuoso-opensource: Denial of Service via crafted SQL statements
  4. CVE-2025-61018virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements in sqlo_place_dt_set
  5. CVE-2025-60753libarchive: bsdtar hangs and OOMs with zero-length pattern matches
  6. CVE-2025-60019glib-networking: Uninitialized Memory Dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()
  7. CVE-2025-60018glib-networking: Out of Bound Reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"
  8. CVE-2025-59830rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters
  9. CVE-2025-59825astral-tokio-tar: astral-tokio-tar path traversal
  10. CVE-2025-59800Artifex Ghostscript: Artifex Ghostscript: Denial of Service via crafted document processing
  11. CVE-2025-59799Artifex Ghostscript: From CVEorg collector
  12. CVE-2025-59798Artifex Ghostscript: Artifex Ghostscript: Denial of Service via stack-based buffer overflow in pdf_write_cmap
  13. CVE-2025-59777libmicrohttpd: GNU libmicrohttpd null pointer dereference
  14. CVE-2025-59775httpd: Apache HTTP Server: NTLM Leakage on Windows via SSRF
  15. CVE-2025-59529avahi: simple clients denial-of-service
  16. CVE-2025-59472next: NextJS Denial of Service in Partial Pre Rendering
  17. CVE-2025-59471next: NextJS Denial of Service in Image Optimizer
  18. CVE-2025-59466nodejs: Nodejs denial of service
  19. CVE-2025-59465nodejs: Nodejs denial of service
  20. CVE-2025-59464nodejs: Nodejs memory leak
  21. CVE-2025-59432ongres-scram: Timing Attack Vulnerability in SCRAM Authentication
  22. CVE-2025-59375firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
  23. CVE-2025-59362squid-cache: Squid cache buffer overflow
  24. CVE-2025-59331is-arrayish: [email protected] contains malware after npm account takeover
  25. CVE-2025-59330error-ex: error-ex: npm account takeover leads to malware
  26. CVE-2025-59303haproxy: HAProxy Kubernetes Ingress Controller: Secret Leak via Config Snippets
  27. CVE-2025-59162color-convert: [email protected] contains malware after npm account takeover
  28. CVE-2025-59145color-name: [email protected] contains malware after npm account takeover
  29. CVE-2025-59144debug: [email protected] contains malware after npm account takeover
  30. CVE-2025-59143color: [email protected] contains malware after npm account takeover
  31. CVE-2025-59142color-string: [email protected] contains malware after npm account takeover
  32. CVE-2025-59141simple-swizzle: [email protected] contains malware after npm account takeover
  33. CVE-2025-59089python-kdcproxy: Remote DoS via unbounded TCP upstream buffering
  34. CVE-2025-59088python-kdcproxy: Unauthenticated SSRF via Realm‑Controlled DNS SRV
  35. CVE-2025-59057react-router: @remix-run/router: React Router XSS Vulnerability
  36. CVE-2025-59052@angular/ssr: @angular/platform-server: @nguniversal/common: Angular Cross-Request Data Leakage
  37. CVE-2025-59032dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command
  38. CVE-2025-59031dovecot: Dovecot: Information disclosure via specially crafted OOXML documents
  39. CVE-2025-59028dovecot: Dovecot: Denial of Service via invalid SASL data
  40. CVE-2025-58767rexml: REXML denial of service
  41. CVE-2025-58754axios: Axios DoS via lack of data size check
  42. CVE-2025-58436cups: Slow client communication leads to a possible DoS attack
  43. CVE-2025-58364cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS
  44. CVE-2025-58190golang.org/x/net/html: Infinite parsing loop in golang.org/x/net
  45. CVE-2025-58189crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information
  46. CVE-2025-58188crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509
  47. CVE-2025-58187crypto/x509: Quadratic complexity when checking name constraints in crypto/x509
  48. CVE-2025-58186golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http
  49. CVE-2025-58185encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1
  50. CVE-2025-58183golang: archive/tar: Unbounded allocation when parsing GNU sparse map
CVE 2025 document archive — Page 14 | PulseLinux