CVE-2025-40594

A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...

CVE-2025-40594

A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...

CVE-2025-40594

A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...

PT-2025-36679

Name of the Vulnerable Software and Affected Versions: SINAMICS G220 versions prior to 6.4 HF2 SINAMICS S200 version 6.4 SINAMICS S210 versions prior to 6.4 HF2 Description: The affected devices allow a factory reset to be executed without the required privileges due to improper privilege...

NVIDIA BlueField Privilege Escalation

The vulnerability of the control interface for NVIDIA BlueField microprogrammed data processing software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges by modifying configuration data...

CVE-2025-36162

IBM DevOps Deploy / IBM UrbanCode Deploy UCD 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system...

CVE-2025-36162

CVE-2025-36162 affects IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1.x before 8.1.2.2. An authenticated user could obtain sensitive information about the system configuration. Affected versions include 8.1 through 8.1.2.1. The vulnerability is categorized as exposure of sensitive system info...

CVE-2025-36162 IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure

IBM DevOps Deploy / IBM UrbanCode Deploy UCD 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system...

Linux Distros Unpatched Vulnerability : CVE-2025-38648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32spiprobe The stm32spiprobe function now...

IBM DevOps Deploy security vulnerability

IBM DevOps Deploy is an application release solution from International Business Machines IBM, Inc. Standardizes and simplifies the process of deploying software components to each environment during the development cycle. A security vulnerability exists in IBM DevOps Deploy versions prior to...

PT-2025-35605

Name of the Vulnerable Software and Affected Versions: IBM DevOps Deploy / IBM UrbanCode Deploy UCD versions prior to 8.1.2.2 Description: An authenticated user may be able to obtain sensitive information about the system’s configuration. Recommendations: Update to version 8.1.2.2 or later...

LibRaw Phase One Correct Heap Buffer Overflow

The vulnerability of the phaseonecorrect function in the decoders/loadmfbacks.cpp component of the LibRaw image processing library is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2023-7308

SecGate3600, a network firewall product developed by NSFOCUS, contains a sensitive information disclosure vulnerability in the /cgi-bin/authUser/authManageSet.cgi endpoint. The affected component fails to enforce authentication checks on POST requests to retrieve user data. An unauthenticated...

CVE-2025-53507

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under Product Status...

Meitrack T366G-L GPS Tracker security vulnerabilities

Meitrack T366G-L GPS Tracker is a vehicle GPT locator from Meitrack China. A security vulnerability exists in the Meitrack T366G-L GPS Tracker, which originates from improper access control of the SPI flash memory chip and could lead to the disclosure of sensitive configuration data...

CVE-2025-38648

In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32spiprobe The stm32spiprobe function now includes a check to ensure that the pointer returned by ofdevicegetmatchdata is not NULL before accessing its members. This resolves a warning...

DEBIAN-CVE-2025-38648

In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32spiprobe The stm32spiprobe function now includes a check to ensure that the pointer returned by ofdevicegetmatchdata is not NULL before accessing its members. This resolves a warning...

UBUNTU-CVE-2025-38648

In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32spiprobe The stm32spiprobe function now includes a check to ensure that the pointer returned by ofdevicegetmatchdata is not NULL before accessing its members. This resolves a warning...

CVE-2025-38648

CVE-2025-38648 refers to a Linux kernel issue in the stm32 SPI driver. The stm32_spi_probe now validates that the pointer returned by of_device_get_match_data (cfg) is non-NULL before accessing cfg->has_device_mode, preventing a potential NULL pointer dereference and possible system crash. If ...

CVE-2025-38648 spi: stm32: Check for cfg availability in stm32_spi_probe

In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32spiprobe The stm32spiprobe function now includes a check to ensure that the pointer returned by ofdevicegetmatchdata is not NULL before accessing its members. This resolves a warning...