22936 matches found
SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co. Ltd (CNVD-C-2025-778387)
T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fixed an issue where an invalid lock was taken on a wedge. If devices like GuC upload are wedged, the submission is not yet enabled, and the state has not even been initialized. This fix prevents the wedge-related calls...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin Assignments A poorly implemented DisplayPort Alt Mode port partner may indicate that its pin assignment capabilities exceed the maximum value, DPPINASSIGNF. In this case,...
FRRouting Denial of Service Vulnerability (CNVD-2026-10883)
FRRouting is FRRouting open source a network routing software suite running on a Unix-like platform . FRRouting suffers from a denial of service vulnerability caused by NULL pointer dereference via the showvtyextprefprefsid function on ospfext.c. An attacker could exploit this vulnerability to...
F5 Networks F5OS-A/F5OS-C Multiple Vulnerabilities (K000156767, K000156771, K000156796)
The version of F5 Networks F5OS-A or F5OS-C installed on the remote host is affected by a vulnerability as referenced in the K000156767, K000156771 and K000156796 security advisories. - A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access ...
F5 Networks F5OS-C DoS (K000151718)
The version of F5 Networks F5OS-C installed on the remote host is affected by a vulnerability as referenced in the K000151718 advisory. - When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate. Note...
[SECURITY] Fedora 42 Update: qt6-qtwebchannel-6.9.3-1.fc42
The Qt WebChannel module provides a library for seamless integration of C++ and QML applications with HTML/JavaScript clients. Any QObject can be published to remote clients, where its public API becomes available...
[SECURITY] Fedora 42 Update: qt6-qtscxml-6.9.3-1.fc42
The Qt SCXML module provides functionality to create state machines from SCXM L files. This includes both dynamically creating state machines loading the SCXML file and instantiating states and transitions and generating a C++ file that has a class implementing the state machine. It also contains...
[SECURITY] Fedora 42 Update: qt6-qtdatavis3d-6.9.3-1.fc42
Qt Data Visualization module provides multiple graph types to visualize data in 3D space both with C++ and Qt Quick 2...
[SECURITY] Fedora 42 Update: qt6-qt3d-6.9.3-1.fc42
Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications...
[SECURITY] Fedora 42 Update: dtk6log-0.0.2-13.fc42
Simple, convenient and thread safe logger for Qt-based C++ apps...
[SECURITY] Fedora 41 Update: unbound-1.24.1-1.fc41
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
PT-2025-45711
sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -c without sanitization, allowing attackers to execute arbitrary commands. This issue has been patched via commit...
CVE-2025-60320
memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service memoQauhlp101. The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to...
PT-2025-44335
Highlights New Product Support AMD Ryzen™ AI 5 330 New Game Support Battlefield™ 6 DX12 Vampire: The Masquerade - Bloodlines 2 DX12 Expanded Vulkan Extension Support VK EXT shader float8 VK KHR video decode vp9 VK KHR video encode av1 VK KHR video encode quantization map VK AMDX dense geometry...
PT-2025-44336
Highlights New Product Support AMD Ryzen™ AI 5 330 New Game Support Battlefield™ 6 DX12 Vampire: The Masquerade - Bloodlines 2 DX12 Expanded Vulkan Extension Support VK EXT shader float8 VK KHR video decode vp9 VK KHR video encode av1 VK KHR video encode quantization map VK AMDX dense geometry...
Siemens SIMATIC and Ruggedcom ROX Devices Integer Overflow or Wraparound (CVE-2020-12762)
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Siemens SIMATIC Devices Stack-based Buffer Overflow (CVE-2023-4911)
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with SUID permission to execute code...
PT-2025-44182
Name of the Vulnerable Software and Affected Versions FRRouting/frr versions 4.0 through 10.4.1 Description FRRouting/frr contains a flaw due to a NULL pointer dereference in the show vty ext pref pref sid function located in the ospf ext.c file. This issue can be triggered by a crafted LSA Updat...
