TencentOS Server 4: emacs (TSSA-2024:0283)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0283 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: firefox (TSSA-2025:0151)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0151 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: nodejs20 (TSSA-2025:0293)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0293 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: flac (TSSA-2025:0147)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0147 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: golang (TSSA-2024:0627)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0627 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: apr (TSSA-2024:0358)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0358 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2024-41797

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions V3.1, SCALANCE XC316-8 6GK5324-8TS00-2AC2 All versions V3.1, SCALANCE XC324-4 6GK5328-4TS00-2AC2 All versions V3.1, SCALANCE XC324-4 EEC 6GK5328-4TS00-2EC2 All versions V3.1, SCALANCE XC332 6GK5332-0GA00-2AC2 All...

CVE-2025-40569

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions V3.2, SCALANCE XCH328 6GK5328-4TS01-2EC2 All versions V3.2, SCALANCE XCM324 6GK5324-8TS01-2AC2 All versions V3.2, SCALANCE XCM328 6GK5328-4TS01-2AC2 All versions V3.2, SCALANCE XCM332 6GK5332-0GA01-2AC2 All...

CVE-2025-40569

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions V3.2, SCALANCE XCH328 6GK5328-4TS01-2EC2 All versions V3.2, SCALANCE XCM324 6GK5324-8TS01-2AC2 All versions V3.2, SCALANCE XCM328 6GK5328-4TS01-2AC2 All versions V3.2, SCALANCE XCM332 6GK5332-0GA01-2AC2 All...

CVE-2025-40569

CVE-2025-40569 affects Siemens industrial devices (RUGGEDCOM RST2428P, SCALANCE X-series, XRM/XRH/XCM variants, etc.) prior to v3.2. The vulnerability is a race condition in the web interface’s Load Configuration from Local PC function. An authenticated remote attacker could cause the device to l...

CVE-2025-40567

CVE-2025-40567 affects Siemens RUGGEDCOM RST2428P and a range of SCALANCE devices (XC316-8, XC324-4, XC332, XC416-8, XC424-4, XC432, XCH328, XCM324/328/332, XR302-32, XR322-12, XR326-8, XR502-32, XR522-12, XR526-8, XRH334, XRM334) with all versions before V3.2. The root cause is an incorrect auth...

CVE-2024-41797

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions V3.1, SCALANCE XC316-8 6GK5324-8TS00-2AC2 All versions V3.1, SCALANCE XC324-4 6GK5328-4TS00-2AC2 All versions V3.1, SCALANCE XC324-4 EEC 6GK5328-4TS00-2EC2 All versions V3.1, SCALANCE XC332 6GK5332-0GA00-2AC2 All...

AZL-63875 CVE-2025-47712 affecting package nbdkit for versions less than 1.35.3-4

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

AZL-63878 CVE-2025-47711 affecting package nbdkit for versions less than 1.35.3-4

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...

📄 vBulletin 4.x movepm PHP Object Injection

In vBulletin 4.x, a flawed security patch from 2014 has introduced a new post-auth PHP object injection vector by replacing serialize with jsonencode — ironically making it possible to get vBulletin to sign attacker-controlled base64-encoded payloads, potentially allowing users to perform remote...

CVE-2025-22245

creationtimestamp| type| source ---|---|--- 2025-06-04 20:06:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsm3qovos42 2025-06-04 20:40:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114627026280664501...

CVE-2025-5584

creationtimestamp| type| source ---|---|--- 2025-06-04 10:57:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrniowweg62 2025-06-04 13:20:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrvhxcgrv2e...

CVE-2025-5575

creationtimestamp| type| source ---|---|--- 2025-06-04 07:30:39+00:00| published-proof-of-concept| Telegram/0C4H1-9p6rhhkzClfhyA9efZ8JNoRql5IFgGY-PSQg7BbWM 2025-06-04 10:49:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrn26scwb2a...

Razer Synapse 4 安全漏洞

Razer Synapse 4 is an application from the American company Razer, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 4 4.0.86.2502180127 and prior versions, which stems from a COM interface vulnerability that could lead to local elevation of...

Fedora: Security Advisory (FEDORA-2025-118f6569ff)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...