Alibaba Cloud Linux 3 : 0219: xorg-x11-server and xorg-x11-server-Xwayland (ALINUX3-SA-2022:0219)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0219 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-4008: A flaw was found in...

D-Link DIR-619L Router FormEasySetupWizard3 Buffer Overflow

The vulnerability of the formEasySetupWizard3 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

D-Link DIR-619L Router Data Compromise

The vulnerability of the formSetEasyWizard function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

D-Link DIR-619L Router Form Set WAN XSS

The vulnerability of the formSetWANWizard52 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

Windows Task Scheduler Data Compromise

The vulnerability of the Windows operating system’s task scheduler is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Alibaba Cloud Linux 3 : 0178: edk2 (ALINUX3-SA-2024:0178)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0178 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-45236: EDK2's Network Package is...

Alibaba Cloud Linux 3 : 0007: rpm (ALINUX3-SA-2022:0007)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0007 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-20266: A flaw was found in RPM's...

Alibaba Cloud Linux 3 : 0064: grub2 (ALINUX3-SA-2022:0064)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0064 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-10713: A flaw was found in grub2,...

Security Advisory Ivanti Endpoint Manager Mobile (EPMM) May 2025 (CVE-2025-4427 and CVE-2025-4428)

Last Modified Date Aug 23, 2026 10:42:43 PM...

CVE-2025-40555

CVE-2025-40555 affects the APOGEE PXC+TALON TC Series (BACnet). After processing a specific BACnet createObject request, affected devices may start sending unsolicited BACnet broadcast messages, which can enable a same-network attacker to induce a partial denial of service and reduce network avai...

CVE-2025-40555

A vulnerability has been identified in APOGEE PXC+TALON TC Series BACnet All versions. Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially...

kernel: of: module: add buffer overflow check in of_modalias()

A buffer overflow flaw was found in ofmodalias in the Linux kernel, occurring after the first snprintf call. This issue could result in loss of availability of the system...

kernel: wifi: cfg80211: clear link ID from bitmap during link delete after clean up

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear link ID from bitmap during link delete after clean up Currently, during link deletion, the link ID is first removed from the validlinks bitmap before performing any clean-up operations. However, some functio...

kernel: parport: Proper fix for array out-of-bounds access

An out-of-bounds array access memory flaw was found in the Linux kernel. When snprintf returns the would-be-printed size, not the actual output size, the length calculation can still go over the given limit and cause an overflow, resulting in loss of availability of the system...

kernel: wifi: cfg80211: Set correct chandef when starting CAC

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A local user could trigger a system crash, leading to a Denial of Service DoS, due to an incorrect channel definition during the Channel Availability Check CAC startup when operating in a mode other than Access Point AP mode. This...

kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input

A denial of service vulnerability was found in the Linux kernel. No input validation is performed in the Bluetooth hcisock function. This vulnerability could lead to a crash, resulting in the loss of system availability...

kernel: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()

A use-after-free vulnerability exists in the Bluetooth stack of the Linux kernel. The l2capconnect does not return void during the function return, potentially leading to a loss of system availability...

kernel: exfat: fix potential deadlock on __exfat_get_dentry_set

A potential deadlock on exfatgetdentryset was found in the Linux kernel. This may lead to decreased Availability...

CVE-2025-43010

SAP S/4HANA Cloud Private Edition or on Premise SCM Master Data Layer MDL allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation an...

CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...