CVE 2025 document archive · 19

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 19 / 82

901. CVE-2025-47273setuptools: Path Traversal Vulnerability in setuptools PackageIndex→
902. CVE-2025-47268iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping→
903. CVE-2025-47219gstreamer1-plugins-good: GStreamer MP4 Parser Heap Overflow→
904. CVE-2025-47183gstreamer1-plugins-good: GStreamer MP4 Parser Heap Overflow→
905. CVE-2025-47153nodejs: libuv: Out-of-Bounds Access Due to Inconsistent off_t Size in libuv and Node.js Build on i386→
906. CVE-2025-47151lasso: Type confusion in Entr'ouvert Lasso→
907. CVE-2025-46836net-tools: net-tools Stack Buffer Overflow→
908. CVE-2025-46835git: Git GUI can create and overwrite files for which the user has write permission→
909. CVE-2025-46819Redis: Redis is vulnerable to DoS via specially crafted LUA scripts→
910. CVE-2025-46818Redis: Redis: Authenticated users can execute LUA scripts as a different user→
911. CVE-2025-46817redis: Lua library commands may lead to integer overflow and potential RCE→
912. CVE-2025-46805screen: Race Conditions when Sending Signals→
913. CVE-2025-46804screen: File Existence Tests via Socket Lookup Error Messages→
914. CVE-2025-46803screen: Screen by Default Creates World Writable PTYs→
915. CVE-2025-46802screen: TTY Hijacking while Attaching to a Multiuser Session→
916. CVE-2025-46784lasso: Memory exhaustion in Entr'ouvert Lasso→
917. CVE-2025-46727rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser→
918. CVE-2025-46705lasso: Denial of service in Entr'ouvert Lasso→
919. CVE-2025-46701tomcat: Apache Tomcat: Security constraint bypass for CGI scripts→
920. CVE-2025-46653formidable: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Formidable→
921. CVE-2025-46646Ghostscript: Mishandling of Overlong UTF-8 Encoding in Artifex Ghostscript's decode_utf8 Function→
922. CVE-2025-46421libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server→
923. CVE-2025-46420libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c→
924. CVE-2025-46404lasso: Denial of service in Entr'ouvert Lasso→
925. CVE-2025-46400xfig: fig2dev segmentation fault in read_arcobject→
926. CVE-2025-46399xfig: transfig: Fig2dev Segmentation Fault Vulnerability→
927. CVE-2025-46398xfig: fig2dev stack-overflow via read_objects→
928. CVE-2025-46397xfig: xfig: Stack-overflow allows possible code execution via local input manipulation→
929. CVE-2025-46393ImageMagick: Incorrect Calculation of Buffer Size in ImageMagick's Multispectral MIFF Processing→
930. CVE-2025-46392apache-commons-configuration: Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x→
931. CVE-2025-46336rack: Rack::Session Session Persistence Vulnerability→
932. CVE-2025-46299webkitgtk: Processing maliciously crafted web content may disclose internal states of the app→
933. CVE-2025-45767jose: Jose Weak Encryption Vulnerability→
934. CVE-2025-45582tar: Tar path traversal→
935. CVE-2025-43965ImageMagick: Incorrect Handling of Image Depth in MIFF Processing in ImageMagick→
936. CVE-2025-43964LibRaw: Improper Validation of Specified Quantity in Input in LibRaw→
937. CVE-2025-43963LibRaw: out-of-buffer access→
938. CVE-2025-43962LibRaw: Out-of-Bounds Read in LibRaw's phase_one_correct Function→
939. CVE-2025-43961LibRaw: Out-of-Bounds Read in Fujifilm 0xf00c Tag Parser in LibRaw→
940. CVE-2025-43903poppler: SignatureValue not checked within SignerInfo→
941. CVE-2025-43865react-router: React Router allows pre-render data spoofing on React-Router framework mode→
942. CVE-2025-43864react-router: React Router allows a DoS via cache poisoning by forcing SPA mode→
943. CVE-2025-43857net-imap: net-imap rubygem vulnerable to possible DoS by memory exhaustion→
944. CVE-2025-43718poppler: Poppler stack overflow→
945. CVE-2025-43541webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash→
946. CVE-2025-43536webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
947. CVE-2025-43535webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
948. CVE-2025-43531webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→
949. CVE-2025-43529webkitgtk: webkitgtk: Use-after-free due to improper memory management→
950. CVE-2025-43511webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash→