Aikaan IoT management platform 安全漏洞

Aikaan IoT management platform is a management platform from Aikaan India. Aikaan IoT management platform version v3.25.0325-5-g2e9c59796 has a security vulnerability that originates from sending a new password in clear text, which could lead to password exposure...

Aikaan IoT management platform 安全漏洞

Aikaan IoT management platform is a management platform from Aikaan India. Aikaan IoT management platform version v3.25.0325-5-g2e9c59796 suffers from a security vulnerability that stems from the registration API endpoint not being disabled, which could lead to authentication bypass and...

PT-2025-34270 · Unknown · Aikaan Iot Management Platform

Name of the Vulnerable Software and Affected Versions: Aikaan IoT management platform version 3.25.0325-5-g2e9c59796 Description: The Aikaan IoT management platform allows unauthenticated users to register accounts via APIs, even when user sign-up is disabled through the user interface. This...

PT-2025-34264 · Unknown · Aikaan Iot Management Platform

Name of the Vulnerable Software and Affected Versions: Aikaan IoT management platform version 3.25.0325-5-g2e9c59796 Description: The Aikaan IoT management platform sends newly generated passwords to users in plaintext via email. The same password is also included as a query parameter in the...

Linux Distros Unpatched Vulnerability : CVE-2024-23638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against...

CVE-2025-47206 File Station 5

An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4933 and later...

Malicious code in via-date-picker-test-5 (npm)

The package via-date-picker-test-5 was found to contain malicious code...

Malicious code in react-router-dom-5 (npm)

The package react-router-dom-5 was found to contain malicious code...

Siemens SIPROTEC 5

SUMMARY Affected SIPROTEC 5 devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcing them to exhaust their...

AZL-66198 CVE-2025-8837 affecting package jasper for versions less than 2.0.32-5

A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file src/libjasper/jpc/jpcdec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public...

Linux Distros Unpatched Vulnerability : CVE-2019-11683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udpgroreceivesegment in net/ipv4/udpoffload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service slab-out-of-bounds memo...

[SECURITY] [DLA 4267-1] gnutls28 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4267-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 09, 2025 https://wiki.debian.org/LTS -...

Debian dla-4267 : gnutls-bin - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4267 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4267-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2024-44993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in v3dcsdjobrun When enabling UBSAN on Raspberry Pi 5, we ge...

AZL-66138 CVE-2025-47907 affecting package golang for versions less than 1.22.7-5

Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...

MAL-2025-6776 Malicious code in undeface-test-5 (npm)

The package communicates with a domain associated with malicious activity...

AZL-66101 CVE-2025-4674 affecting package golang for versions less than 1.22.7-5

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...

casbin-couchbase-adapter (>=0.1.3 <=0.1.4), pycouchbase (>=0.1.0.dev1 <=0.1.0b1) +1 more potentially affected by CVE-2025-52490 via couchbase (>=2.0.0 <=2.5.12)

couchbase PYPI version =2.0.0, =0.1.3, =0.1.0.dev1, =1.0.4, =2.0.2 Source cves: CVE-2025-52490 Source advisory: OSV:PYSEC-2025-101...

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 安全漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Enalean Tuleap Community Edition prior to 16.9.99.17525856...

Ubuntu: Security Advisory (USN-6885-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...