CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

CVE-2023-34397

CVE-2023-34397 affects Mercedes-Benz head-unit NTG 6. The vulnerability arises when importing or exporting user profile settings over USB; during parsing the service can crash, with the impact described as a high availability/partial impact scenario. Public documentation notes the USB subsystem a...

CVE-2024-37600

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fixed a possible null pointer dereferencing issue. In malidpmwconnectorreset, new memory is allocated using kzalloc, but no checks are performed. To prevent null pointer dereferencing, ensure that mwstate is check...

Debian: Security Advisory (DSA-5863-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5863-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5863-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 10, 2025 https://www.debian.org/security/faq -...

Apple Security Update: watchOS 11.3.1

Apple recommends to install security update watchOS 11.3.1 on devices Apple Watch Series 6 and later...

Debian dsa-5863 : libtasn1-6 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5863 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5863-1 [email protected] https://www.debian.org/security/...

DSA-5863-1 libtasn1-6 - security update

Bulletin has no description...

UBUNTU-CVE-2025-1017

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 13...

CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1

CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1. A patched version of the package is available...

CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6

CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6. A patched version of the package is available...

CVE-2022-39382

Keystone is a headless CMS for Node.js — built with GraphQL and React.@keystone-6/[email protected] || 3.0.1 users that use NODEENV to trigger security-sensitive functionality in their production builds are vulnerable to NODEENV being inlined to "development" for user code, irrespective of what your...

CVE-2022-39322

@keystone-6/core is a core package for Keystone 6, a content management system for Node.js. Starting with version 2.2.0 and prior to version 2.3.1, users who expected their multiselect fields to use the field-level access control - if configured - are vulnerable to their field-level access contro...

AZL-56478 CVE-2025-0167 affecting package curl for versions less than 8.8.0-6

When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...

Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2024-34459: Fixed buffer over-read in bsc1224282 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

RHEL 6 : rsync (RHSA-2025:0849)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0849 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...

python-jinja2 security update

2.10.1-6 - Security fix for CVE-2024-56326 Resolves: RHEL-74677...

RHEL 8 : redis:6 (RHSA-2025:0689)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0689 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...

RHEL 8 : redis:6 (RHSA-2025:0640)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0640 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...