PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 18

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 18 / 82

  1. CVE-2025-49133libtpms: Libtpms Out-of-Bounds Read Vulnerability
  2. CVE-2025-49128com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation
  3. CVE-2025-49125tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources
  4. CVE-2025-49091konsole: Konsole Remote Code Execution Vulnerability
  5. CVE-2025-49014jq: jq Heap Use-After-Free Vulnerability
  6. CVE-2025-49010OpenSC: OpenSC: Stack-buffer-overflow via crafted smart card or USB device responses
  7. CVE-2025-49007rack: rubygem-rack: Rack Content-Disposition Denial of Service
  8. CVE-2025-49005nextjs: Next.js cache poisoning
  9. CVE-2025-48989tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames
  10. CVE-2025-48988tomcat: Apache Tomcat DoS in multipart upload
  11. CVE-2025-48976apache-commons-fileupload: Apache Commons FileUpload DoS via part headers
  12. CVE-2025-48964iputils: iputils integer overflow
  13. CVE-2025-48924commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang
  14. CVE-2025-48866mod_security: ModSecurity Denial of Service Vulnerability
  15. CVE-2025-48798gimp: Multiple use after free in XCF parser
  16. CVE-2025-48797gimp: Multiple heap buffer overflows in TGA parser
  17. CVE-2025-48796gimp: Stack-based buffer overflows in file-ico
  18. CVE-2025-48734commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
  19. CVE-2025-48708Ghostscript: Ghostscript Argument Sanitization Vulnerability
  20. CVE-2025-48431Apache Thrift: c_glib: Apache Thrift c_glib: Denial of Service via specially crafted requests
  21. CVE-2025-48386git: Git buffer overflow
  22. CVE-2025-48385git: Git arbitrary file writes
  23. CVE-2025-48384git: Git arbitrary code execution
  24. CVE-2025-48379python-pillow: pillow: Pillow DDS Heap Buffer Overflow
  25. CVE-2025-48367redis: Redis Unauthenticated Denial of Service
  26. CVE-2025-48074openexr: OpenEXR memory exhaustion
  27. CVE-2025-48073openexr: OpenEXR NULL pointer dereference
  28. CVE-2025-48072openexr: OpenEXR Out of Bounds Read
  29. CVE-2025-48071openexr: OpenEXR Heap-Based Buffer Overflow
  30. CVE-2025-48068next.js: Information exposure in Next.js dev server due to lack of origin verification
  31. CVE-2025-48060jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
  32. CVE-2025-47947modsecurity: ModSecurity Has Possible DoS Vulnerability
  33. CVE-2025-47914golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
  34. CVE-2025-47913golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS
  35. CVE-2025-47912net/url: Insufficient validation of bracketed IPv6 hostnames in net/url
  36. CVE-2025-47911golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html
  37. CVE-2025-47910net/http: CrossOriginProtection bypass in net/http
  38. CVE-2025-47908github.com/rs/cors: Denial of service via malicious preflight requests in github.com/rs/cors
  39. CVE-2025-47907database/sql: Postgres Scan Race Condition
  40. CVE-2025-47906os/exec: Unexpected paths returned from LookPath in os/exec
  41. CVE-2025-47905varnish: request smuggling attacks
  42. CVE-2025-47808gstreamer1-plugins-base: GStreamer Subparse NULL Pointer Dereference
  43. CVE-2025-47807gstreamer1-plugins-base: GStreamer Subparse NULL Pointer Dereference
  44. CVE-2025-47806gstreamer1-plugins-base: GStreamer Subparse Stack Buffer Overflow
  45. CVE-2025-47712nbd: nbdkit: Integer overflow triggers an assertion resulting in Denial of Service
  46. CVE-2025-47711nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a Denial of Service
  47. CVE-2025-47290containerd: Containerd vulnerable to host filesystem access during image unpack
  48. CVE-2025-47287tornado: Tornado Multipart Form-Data Denial of Service
  49. CVE-2025-47279undici: Undici Memory Leak with Invalid Certificates
  50. CVE-2025-47278flask: Flask Session Signing Fallback Key Vulnerability
CVE 2025 document archive — Page 18 | PulseLinux