Linux Kernel any version

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.

ibmveth: Disable GSO for packets with small MSS

Insecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager

ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()

net: zero-initialize tc skb extension on allocation

scsi: sd: Fix off-by-one error in sd_read_block_characteristics()

xfrm6: fix uninitialized saddr in xfrm6_get_saddr()

ksmbd: require 3 sub-authorities before reading sub_auth[2]

ksmbd: prevent path traversal bypass by restricting caseless retry

Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel

netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()

ibmvnic: Don't reference skb after sending to VIOS

bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls

net: mvpp2: sync RX data at the hardware packet offset

idpf: fix kernel panic on unknown packet types

pptp: ensure minimal skb length in pptp_xmit()

bnxt_en: Mask the bd_cnt field in the TX BD properly

vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp

net: atm: fix use after free in lec_send()

vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame

Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

Man-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement.

Portal for ArcGIS has an invalid authentication vulnerability

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Vasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass via LD_PRELOAD Hooking

Unauthorized access to secure services in ArcGIS Server

Vasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink Follow

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes

Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.