Photon OS 5.0: Linux PHSA-2025-5.0-91-0486

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0486. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-40945

creationtimestamp| type| source ---|---|--- 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr4564uojn2r 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr4564mkvd2s...

CVE-2025-40945

CVE-2025-40945 affects multiple Siemens/Siemens Digital Industries software (e.g., COMOS, Designcenter NX, Simcenter suite, Solid Edge, Teamcenter Visualization, Tecnomatix, etc.) across numerous versions. The vulnerability is described as an untrusted search path in the IAM Client SDK that may a...

CVE-2026-40945

creationtimestamp| type| source ---|---|--- 2026-04-21 23:30:54+00:00| seen| Telegram/CTUi-siovRZPMXoRCribr6B1ZCHTTpPI8Ha33jZ7j7d94jM...

CVE-2026-40945

Oxia is a metadata store and coordination system. Prior to 0.16.2, when OIDC authentication fails, the full bearer token is logged at DEBUG level in plaintext. If debug logging is enabled in production, JWT tokens are exposed in application logs and any connected log aggregation system. This...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

EUVD-2025-40945

Malicious code in tiara-lontong36-miaww npm...

EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2025-1562)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved:ntb: intel: Fix the NULL vs ISERR bug for debugfscreatedir The...

Linux Distros Unpatched Vulnerability : CVE-2024-40945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommusvabinddevice iommusvabinddevice should return either a sv...

CVE-2024-40945

creationtimestamp| type| source ---|---|--- 2025-02-21 14:18:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4898 2025-02-21 22:10:23+00:00| seen| Telegram/ORzEuWXvIyoumP8DzeA1wY4TER2LyW7K1HGuVplZfB8dwvcy 2025-08-14 10:00:00+00:00| seen|...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2953)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved:ntb: intel: Fix the NULL vs ISERR bug for debugfscreatedir The debugfscreatedir...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2938)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved:ntb: intel: Fix the NULL vs ISERR bug for debugfscreatedir The debugfscreatedir...

CVE-2024-40945

In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommusvabinddevice iommusvabinddevice should return either a sva bond handle or an ERRPTR value in error cases. Existing drivers idxd and uacce only check the return value with ISERR. This could...

CVE-2024-40945

CVE-2024-40945 : In the Linux kernel, iommu_sva_bind_device() should return a SVA bond handle or an ERR_PTR on error. Some drivers (idxd/uacce) previously only checked for IS_ERR(), which could lead to a NULL pointer dereference if NULL was returned in error paths. The public advisories indicate ...

CVE-2024-40945 iommu: Return right value in iommu_sva_bind_device()

In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommusvabinddevice iommusvabinddevice should return either a sva bond handle or an ERRPTR value in error cases. Existing drivers idxd and uacce only check the return value with ISERR. This could...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the $userid parameter of doctors\myDetails.php. The affected component is the application’s user detail retrieval, enabling manipulation of database queries (root cause: improper handling of user-supplied input leading...

bind -- multiple vulnerabilities

ISC reports: Named is potentially vulnerable to the OpenSSL vulnerability described in CVE-2015-3193. Incorrect reference counting could result in an INSIST failure if a socket error occurred while performing a lookup. This flaw is disclosed in CVE-2015-8461. RT40945 Insufficient testing when...