PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 56

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 56 / 82

  1. CVE-2025-30683mysql: Replication unspecified vulnerability (CPU Apr 2025)
  2. CVE-2025-30682mysql: Optimizer unspecified vulnerability (CPU Apr 2025)
  3. CVE-2025-30681mysql: Replication unspecified vulnerability (CPU Apr 2025)
  4. CVE-2025-30472corosync: Stack buffer overflow from 'orf_token_endian_convert'
  5. CVE-2025-30427webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  6. CVE-2025-30399dotnet: .NET Remote Code Vulnerability
  7. CVE-2025-30360webpack-dev-server: webpack-dev-server information exposure
  8. CVE-2025-30359webpack-dev-server: webpack-dev-server information exposure
  9. CVE-2025-30346varnish: Client-Side Desynchronization in Varnish Cache
  10. CVE-2025-30258gnupg: verification DoS due to a malicious subkey in the keyring
  11. CVE-2025-30218next.js: Next.js may leak x-middleware-subrequest-id to external hosts
  12. CVE-2025-30204golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing
  13. CVE-2025-30163cilium: Node based network policies may incorrectly allow workload traffic
  14. CVE-2025-30162cilium: East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers
  15. CVE-2025-30156kernel: ceph: kernel: Ceph: exploit of hardcoded IVECs, in a misuse of AES, resulting in authentication bypass
  16. CVE-2025-30153github.com/getkin/kin-openapi/openapi3filter: Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
  17. CVE-2025-29927nextjs: Authorization Bypass in Next.js Middleware
  18. CVE-2025-29923github.com/redis/go-redis: go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
  19. CVE-2025-29786github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input
  20. CVE-2025-29768vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files
  21. CVE-2025-29481libbpf: Heap Buffer Overflow in libbpf
  22. CVE-2025-29479hiredis: Heap Buffer Overflow in Hiredis
  23. CVE-2025-29088sqlite: Denial of Service in SQLite
  24. CVE-2025-29087sqlite: Integer Overflow in SQLite concat_ws Function
  25. CVE-2025-28164libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function
  26. CVE-2025-28162libpng: libpng: Denial of Service via buffer overflow in pngimage utility
  27. CVE-2025-27837Ghostscript: Access to arbitrary files through truncated path with invalid UTF-8
  28. CVE-2025-27836Ghostscript: device: Print buffer overflow
  29. CVE-2025-27835Ghostscript: Buffer overflow when converting glyphs to unicode
  30. CVE-2025-27834Ghostscript: Buffer overflow caused by an oversized Type 4 function in a PDF
  31. CVE-2025-27833Ghostscript: Buffer overflow with long TTF font name
  32. CVE-2025-27832Ghostscript: NPDL device: Compression buffer overflow
  33. CVE-2025-27831Ghostscript: Text buffer overflow with long characters
  34. CVE-2025-27830Ghostscript: Buffer overflow during serialization of DollarBlend in font
  35. CVE-2025-27819org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability
  36. CVE-2025-27818apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration
  37. CVE-2025-27817org.apache.kafka: Kafka Client Arbitrary File Read SSRF
  38. CVE-2025-27788json: Ruby JSON Parser has Out-of-bounds Read
  39. CVE-2025-27614gitk: git script execution flaw
  40. CVE-2025-27613gitk: Git file creation flaw
  41. CVE-2025-27610rack: rubygem-rack: Local File Inclusion in Rack::Static
  42. CVE-2025-27553apache-commons-vfs: Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT
  43. CVE-2025-27516jinja2: Jinja sandbox breakout through attr filter selecting format method
  44. CVE-2025-27423vim: Improper Input Validation in Vim
  45. CVE-2025-27363freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files
  46. CVE-2025-27221uri: userinfo leakage in URI#join, URI#merge and URI#+
  47. CVE-2025-27220CGI: ReDoS in CGI::Util#escapeElement
  48. CVE-2025-27219CGI: Denial of Service in CGI::Cookie.parse
  49. CVE-2025-27209nodejs: Node.js Rapidhash HashDoS Vulnerability
  50. CVE-2025-27152axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests
CVE 2025 document archive — Page 56 | PulseLinux