PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 57

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 57 / 82

  1. CVE-2025-27151redis: Redis Stack Buffer Overflow
  2. CVE-2025-27144go-jose: Go JOSE's Parsing Vulnerable to Denial of Service
  3. CVE-2025-27113libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch
  4. CVE-2025-27111rack: rubygem-rack: Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
  5. CVE-2025-27110mod_security: Libmodsecurity3 has possible bypass of encoded HTML entities
  6. CVE-2025-26791dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling
  7. CVE-2025-26696thunderbird: Crafted email message incorrectly shown as being encrypted
  8. CVE-2025-26695thunderbird: Downloading of OpenPGP keys from WKD used incorrect padding
  9. CVE-2025-26682dotnet: .NET: ASP.NET Core denial of service with HTTP/3
  10. CVE-2025-26646dotnet: .NET and Visual Studio Spoofing Vulnerability
  11. CVE-2025-26625git-lfs: Git LFS may write to arbitrary files via crafted symlinks
  12. CVE-2025-26623exiv2: Use After Free in Exiv2
  13. CVE-2025-26603vim: heap-use-after-free in function str_to_reg in vim/vim
  14. CVE-2025-26601xorg: xwayland: Use-after-free in SyncInitTrigger()
  15. CVE-2025-26600xorg: xwayland: Use-after-free in PlayReleasedEvents()
  16. CVE-2025-26599xorg: xwayland: Use of uninitialized pointer in compRedirectWindow()
  17. CVE-2025-26598xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient()
  18. CVE-2025-26597xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey()
  19. CVE-2025-26596xorg: xwayland: Heap overflow in XkbWriteKeySyms()
  20. CVE-2025-26595Xorg: xwayland: Buffer overflow in XkbVModMaskText()
  21. CVE-2025-26594X.Org: Xwayland: Use-after-free of the root cursor
  22. CVE-2025-26466openssh: Denial-of-service in OpenSSH
  23. CVE-2025-26465openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled
  24. CVE-2025-26434libxml2: Libxml2 out of bounds read
  25. CVE-2025-25724libarchive: Buffer Overflow vulnerability in libarchive
  26. CVE-2025-25186net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion
  27. CVE-2025-25184rubygem-rack: Possible Log Injection in Rack::CommonLogger
  28. CVE-2025-24965crun: .krun_config.json symlink attack creates or overwrites file on the host in crun
  29. CVE-2025-24928libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2
  30. CVE-2025-24912hostapd: RADIUS Packet Processing Flaw in hostapd
  31. CVE-2025-24898rust-openssl: rust openssl ssl::select_next_proto use after free
  32. CVE-2025-24890gix-sec: gix-sec: Privilege escalation via incorrect repository trust on Windows
  33. CVE-2025-24855libxslt: Use-After-Free in libxslt numbers.c
  34. CVE-2025-24813tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
  35. CVE-2025-24531pam_pkcs11: authentication bypass in error situations
  36. CVE-2025-24528krb5: overflow when calculating ulog block size
  37. CVE-2025-24495microcode_ctl: From CVEorg collector
  38. CVE-2025-24294resolv: Denial of Service in resolv gem
  39. CVE-2025-24264webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  40. CVE-2025-24223webkitgtk: Processing maliciously crafted web content may lead to memory corruption
  41. CVE-2025-24216webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
  42. CVE-2025-24213webkitgtk: A type confusion issue could lead to memory corruption
  43. CVE-2025-24209webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  44. CVE-2025-24208webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack
  45. CVE-2025-24201webkitgtk: out-of-bounds write vulnerability
  46. CVE-2025-24189webkitgtk: Processing maliciously crafted web content may lead to memory corruption
  47. CVE-2025-24162webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
  48. CVE-2025-24158webkitgtk: Processing web content may lead to a denial-of-service
  49. CVE-2025-24150webkitgtk: Copying a URL from Web Inspector may lead to command injection
  50. CVE-2025-24143webkitgtk: A maliciously crafted webpage may be able to fingerprint the user
CVE 2025 document archive — Page 57 | PulseLinux