PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2025 document archive · 79

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 79 / 82

  1. CVE-2025-3891mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled
  2. CVE-2025-3887gstreamer1-plugins-bad-free: mingw-gstreamer1-plugins-bad-free: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
  3. CVE-2025-3875thunderbird: Sender Spoofing via Malformed From Header in Thunderbird
  4. CVE-2025-3608firefox: Race condition in nsHttpTransaction could lead to memory corruption
  5. CVE-2025-3580grafana: Improper access control in the /api/org/users/ API endpoint
  6. CVE-2025-3576krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions
  7. CVE-2025-3573jquery-validation: XSS Vulnerability in jquery-validation
  8. CVE-2025-3549Assimp: Open Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflow
  9. CVE-2025-3548Assimp: Open Asset Import Library Assimp File types.h Set heap-based overflow
  10. CVE-2025-3523thunderbird: User Interface (UI) Misrepresentation of attachment URL
  11. CVE-2025-3522thunderbird: Leak of hashed Window credentials via crafted attachment URL
  12. CVE-2025-3454grafana: Unauthorized Data Source Access in Grafana via URL Path Manipulation
  13. CVE-2025-3416rust-openssl: rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`
  14. CVE-2025-3415grafana: Exposure of DingDing alerting integration URL to Viewer level users
  15. CVE-2025-3360glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().
  16. CVE-2025-3359gnuplot: Segmentation fault via IO_str_init_static_internal function
  17. CVE-2025-3277SQLite: integer overflow in SQLite
  18. CVE-2025-3260grafana: Unauthorized Dashboard Access in Grafana
  19. CVE-2025-3198binutils: GNU Binutils objdump bucomm.c display_info memory leak
  20. CVE-2025-3196assimp: Open Asset Import Library Assimp Malformed File MD2Loader.cpp InternReadFile stack-based overflow
  21. CVE-2025-3160assimp: Open Asset Import Library Assimp File SceneCombiner.cpp AddNodeHashes out-of-bounds
  22. CVE-2025-3159assimp: Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow
  23. CVE-2025-3158assimp: Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow
  24. CVE-2025-3155yelp: Arbitrary file read
  25. CVE-2025-3032thunderbird: firefox: Leaking file descriptors from the fork server
  26. CVE-2025-3031firefox: thunderbird: JIT optimization bug with different stack slot sizes
  27. CVE-2025-3030firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9
  28. CVE-2025-3029firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters
  29. CVE-2025-3028firefox: thunderbird: Use-after-free triggered by XSLTProcessor
  30. CVE-2025-2866LibreOffice: PDF signature forgery with adbe.pkcs7.sha1 SubFilter
  31. CVE-2025-2857firefox: Firefox IPC sandbox escape on windows
  32. CVE-2025-2830thunderbird: Information Disclosure of /tmp directory listing
  33. CVE-2025-2817firefox: thunderbird: Privilege escalation in Firefox Updater
  34. CVE-2025-2814Crypt-CBC: Crypt::CBC versions between 1.21 and 3.04 for Perl may use insecure rand() function for cryptographic functions
  35. CVE-2025-2784libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content
  36. CVE-2025-2756assimp: Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow
  37. CVE-2025-2754assimp: Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow
  38. CVE-2025-2753assimp: Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds
  39. CVE-2025-2724libgsf: GNOME libgsf sorting_key_copy out-of-bounds
  40. CVE-2025-2723libgsf: GNOME libgsf gsf_property_settings_collec heap-based overflow
  41. CVE-2025-2720libgsf: GNOME libgsf gsf_base64_encode_simple uninitialized variable
  42. CVE-2025-2703grafana: Cross-Site Scripting in Grafana XY Chart Panel
  43. CVE-2025-2592assimp: Open Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflow
  44. CVE-2025-2584wabt: WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow
  45. CVE-2025-2487389-ds-base: null pointer dereference leads to denial of service
  46. CVE-2025-2486edk2: edk2: UEFI Shell access in Secure Boot environments allows bypass of Secure Boot constraints
  47. CVE-2025-2368wabt: WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow
  48. CVE-2025-2312cifs-utils: kernel: cifs-utils: cifs.upcall makes an upcall to the wrong namespace in containerized environments
  49. CVE-2025-2296edk2: EDK2: Improper Input Validation allows arbitrary command execution
  50. CVE-2025-1943firefox: thunderbird: Memory safety bugs fixed in Firefox 136 and Thunderbird 136