SUSE: Security Advisory (SUSE-SU-2025:1326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-22088

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdmaacceptnewconn After the erdmacepputnewcep being called, newcep will be freed, and the following dereference will cause a UAF problem. Fix this issue...

CVE-2025-22059

In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk-skrmemalloc. udpenqueuescheduleskb has the following condition: if atomicread&sk-;skrmemalloc sk-skrcvbuf goto drop; sk-skrcvbuf is initialised by net.core.rmemdefault and later can be configur...

Yokogawa Recorder Products

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to manipulate information on the affected products. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...

Fedora 41 : rust-openssl / rust-openssl-sys (2025-a13867ecbc)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-a13867ecbc advisory. - Update the openssl crate to version 0.10.72. - Update the openssl-sys crate to version 0.9.107. This update addresses CVE-2025-3416 / RUSTSEC-2025-0022 a...

PT-2025-16891 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: The issue concerns a file upload vulnerability via the "Create Services" file. This vulnerability can be exploited through the "/dashboard/Services" API endpoint. The Create Services...

Siemens TeleControl Server Basic

SUMMARY TeleControl Server Basic before V3.1.2.2 contains a Improper Handling of Length Parameter Inconsistency Vulnerability that could allow an attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a denial of service condition. Siemens has released...

CVE-2025-30730

...

CVE-2025-30727

...

CVE-2025-30722

...

CVE-2025-30721

...

CVE-2025-30720

...

CVE-2025-30718

...

CVE-2025-30698

...

CVE-2025-30692

...

CVE-2025-30688

...

CVE-2025-21585

...

CVE-2025-21582

...

CVE-2025-21582

CVE-2025-21582 affects Oracle E-Business Suite CRM Technical Foundation (Preferences) in versions 12.2.3–12.2.14. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation, with attacks requiring user interaction. The impact ca...

Growatt Cloud Applications

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to compromise confidentiality, achieve cross-site scripting, or code execution on affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...