ECHO-79D4-B3D1-2520

Bulletin has no description...

EUVD-2026-2520

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

CVE-2025-2520

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer EPA communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to...

CVE-2025-2520

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer EPA communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to...

CVE-2025-2520 Dereferencing of an uninitialized pointer leads to denial of service.

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer EPA communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to...

CVE-2025-2520 Dereferencing of an uninitialized pointer leads to denial of service.

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer EPA communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to...

CVE-2025-2520

CVE-2025-2520 affects Honeywell Experion PKS. The root cause is an uninitialized variable in the common Epic Platform Analyzer (EPA) communications, which could allow an attacker to perform Communication Channel Manipulation and dereference an uninitialized pointer, leading to a denial of service...

CVE-2023-2520

A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...

Alibaba Cloud Linux 3 : 0057: libtiff (ALINUX3-SA-2024:0057)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0057 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-2056: Divide By Zero error in...

Linux Distros Unpatched Vulnerability : CVE-2022-2520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted...

Amazon Linux 2 : php (ALAS-2024-2520)

The version of php installed on the remote host is prior to 5.4.16-46. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2520 advisory. An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack...

CVE-2024-2520 MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php sql injection

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bookdate.php. The manipulation of the argument roomid leads to sql injection. The attack can be...

CVE-2024-2520

CVE-2024-2520 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System v1.0. The vulnerability is a SQL injection in /admin/bookdate.php triggered by manipulating the room_id parameter. It is exploitable remotely and has been publicly disclosed. Public sources corroborate an unknown functi...

CVE-2024-2520

creationtimestamp| type| source ---|---|--- 2024-03-15 21:01:20+00:00| seen| https://t.me/ctinow/209123 2024-03-16 17:21:28+00:00| seen| https://t.me/ctinow/209620 2024-03-16 17:26:53+00:00| seen| https://t.me/ctinow/209625 2025-02-14 17:11:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/44...

CentOS 9 : libtiff-4.4.0-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtiff-4.4.0-5.el9 build changelog. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that...

BELL-CVE-2022-2520 CVE-2022-2520 does not affect BellSoft software

Bulletin has no description...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2298)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2520

creationtimestamp| type| source ---|---|--- 2023-05-04 20:32:02+00:00| seen| https://t.me/cibsecurity/63307...

CVE-2023-2520

A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...

CVE-2023-2520

Caton Prime 2.1.2.51.e8d7225049(202303031001) contains a command injection in the Ping Handler, via manipulation of the Destination argument in cgi-bin/tools_ping.cgi?action=Command. This allows remote exploitation and affects the Ping Handler component; impact is high (as per CVE-2023-2520). No ...