CVE-2025-22870 HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
Information published. Continue reading CVE-2025-22870 HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
Month: February 2026
CVE-2024-42280 mISDN: Fix a use after free in hfcmulti_tx()
Information published. Continue reading CVE-2024-42280 mISDN: Fix a use after free in hfcmulti_tx()
CVE-2018-10906 In fuse before versions 2.9.8 and 3.x before 3.2.5 fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the ‘allow_other’ mount option regardless of whether ‘user_allow_other’ is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system accessible by other users and trick them into accessing files on that file system possibly causing Denial of Service or other unspecified effects.
CVE-2020-25576 An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.
CVE-2025-38213 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-47670 ocfs2: add bounds checking to ocfs2_xattr_find_entry()
Information published. Continue reading CVE-2024-47670 ocfs2: add bounds checking to ocfs2_xattr_find_entry()