PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 15

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 15 / 82

  1. CVE-2025-58181golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication
  2. CVE-2025-58160tracing-subscriber: Tracing log pollution
  3. CVE-2025-58098httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...
  4. CVE-2025-58060cups: Authentication Bypass in CUPS Authorization Handling
  5. CVE-2025-58058github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory
  6. CVE-2025-58050pcre2: PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS
  7. CVE-2025-57812cups: CUPS-Filters: Information disclosure and data corruption via crafted TIFF image file processing
  8. CVE-2025-57807imagemagick: ImageMagick BlobStream Forward-Seek Under-Allocation
  9. CVE-2025-57803imagemagick: ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
  10. CVE-2025-57752nextjs: Next.js Affected by Cache Key Confusion for Image Optimization API Routes
  11. CVE-2025-56648parcel: Parcel Origin Validation Error
  12. CVE-2025-56226libsndfile: memory leak when encoding MP3 files due to an incomplete initialization
  13. CVE-2025-56005ply: python-ply: Unsafe pickle file handling in Ply
  14. CVE-2025-55754org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation
  15. CVE-2025-55753mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals
  16. CVE-2025-55752tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
  17. CVE-2025-55668org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve
  18. CVE-2025-55315dotnet: .NET Security Feature Bypass Vulnerability
  19. CVE-2025-55304exiv2: Exiv2 has quadratic performance in ICC profile parsing
  20. CVE-2025-55298ImageMagick: ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution
  21. CVE-2025-55248dotnet: .NET Information Disclosure Vulnerability
  22. CVE-2025-55247dotnet: .NET Denial of Service Vulnerability
  23. CVE-2025-55212ImageMagick: ImageMagick crash on crafted input
  24. CVE-2025-55184next: React Server Components: Denial of Service via unsafe HTTP deserialization
  25. CVE-2025-55183next: React Server Components: Source code exposure through crafted HTTP request
  26. CVE-2025-55182next: React Server Components: Pre-authentication remote code execution via unsafe deserialization
  27. CVE-2025-55173nextjs: Next.js Content Injection Vulnerability for Image Optimization
  28. CVE-2025-55160imagemagick: ImageMagick: Undefined Behavior
  29. CVE-2025-55159slab: Slab: Out-of-bounds Memory Access Vulnerability
  30. CVE-2025-55158vim: Vim double-free vulnerability during Vim9 script import operations
  31. CVE-2025-55157vim: Vim heap use-after-free vulnerability when processing recursive tuple data types
  32. CVE-2025-55154imagemagick: ImageMagick: integer overflows in MNG magnification
  33. CVE-2025-55132nodejs: Nodejs filesystem permissions bypass
  34. CVE-2025-55131nodejs: Nodejs uninitialized memory exposure
  35. CVE-2025-55130nodejs: Nodejs file permissions bypass
  36. CVE-2025-55005imagemagick: ImageMagick: heap-buffer overflow
  37. CVE-2025-55004imagemagick: ImageMagick: heap-buffer overflow
  38. CVE-2025-54874openjpeg: OpenJPEG OOB heap memory write
  39. CVE-2025-54813apache-log4cxx: Log4cxx: Improper JSON Output Neutralization
  40. CVE-2025-54812log4cxx: Log4cxx HTMLLayout XSS Vulnerability
  41. CVE-2025-54798tmp: tmp Symbolic Link Write Vulnerability
  42. CVE-2025-54771grub2: Use-after-free in grub_file_close()
  43. CVE-2025-54770grub2: Use-after-free in net_set_vlan
  44. CVE-2025-54574squid-cache: Squid Buffer Overflow
  45. CVE-2025-54571mod_security: ModSecurity Content-Type Override Vulnerability
  46. CVE-2025-54567qemu-kvm: QEMU SR-IOV Enable Mask Vulnerability
  47. CVE-2025-54566qemu-kvm: QEMU SR-IOV Migration Inconsistency
  48. CVE-2025-54510AMD Platform Security Processor: AMD EPYC 9005 Series CPUs: AMD Platform Security Processor: Information disclosure via missing lock check
  49. CVE-2025-54505kernel: AMD-SN-7053:Floating Point Divider State Sampling on AMD CPUs
  50. CVE-2025-54502AMD Platform Configuration Blob: APCB SMM driver: kernel: linux-firmware: AMD APCB SMM driver: Arbitrary Code Execution via incorrect boot service use
CVE 2025 document archive — Page 15 | PulseLinux