CVE-2024-25132

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

Vulnerability fixed in Synology Replication Service and Synology Unified Controller

Synology has fixed a vulnerability in Synology Replication Service and Synology Unified Controller. The vulnerability is located in an off-by-one flaw in the Synology Replication Service and Synology Unified Controller, which allows remote attackers to execute arbitrary code. This can lead to...

CVE-2024-10442

Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote attackers to execute arbitrary code, potentially leading to a broader impact across the...

The vulnerability of the system-mounted module in operating systems such as Synology BeeStation Manager (BSM), Synology DiskStation Manager (DSM), and the enterprise-level server Synology Unified Controller allows a perpetrator to execute arbitrary code.

The vulnerability of the system-mounted modules of the Synology BeeStation Manager BSM, Synology DiskStation Manager DSM, and the corporate-level server Synology Unified Controller lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a remote...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, wolfictl, beats-fips, helm-operator-fips, neuvector-scanner-fips, flux-source-controller-fips, rancher-agent, spegel, chartmuseum, cluster-api-helm-controller-fips, k8ssandra-client, consul-k8s, helm-operator, opa-fips-envoy, zot, opa, kubescape,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, wolfictl, beats-fips, helm-operator-fips, neuvector-scanner-fips, flux-source-controller-fips, rancher-agent, spegel, chartmuseum, cluster-api-helm-controller-fips, k8ssandra-client, consul-k8s, helm-operator, opa-fips-envoy, zot, opa, kubescape,...

PT-2025-11584

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated remote attacker can gain limited information of the PLC network, but the user management of the PLCs prevents actual access to the PLCs. Recommendations At the moment, there...

Linux VDA 2203: Can not register to Delivery Controller

User failed to launch published desktop, VDA failed to register Delivery Controller in Citrix Studio...

CODESYS Edge Gateway 安全漏洞

CODESYS Edge Gateway is an extended CODESYS gateway from CODESYS Germany used to connect CODESYS automation servers to CODESYS PLCs in a local network. A security vulnerability exists in CODESYS Edge Gateway versions prior to 3.5.21.0, which stems from the fact that an unauthenticated remote...

CVE-2025-2304

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without a...

The vulnerability of the BT Controller component of Qualcomm’s embedded software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the BT Controller component in the microprogramming software of Qualcomm’s integrated chips is related to data encryption errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Microprogramming Software in the Wiren Board controller lies in the lack of implementation for authentication when changing access rights, allowing attackers to escalate their privileges.

The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the absence of authentication mechanisms for changing access rights. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2025-11259

Name of the Vulnerable Software and Affected Versions Camaleon CMS affected versions not specified Description Privilege escalation is possible through mass assignment, a condition where an application takes user-provided data and binds it to an internal object without proper filtering. This occu...

usb: xhci: Fix NULL pointer dereference on certain command aborts

...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2025-2194

CVE-2025-2194 affects MRCMS 3.1.2: cross-site scripting in the FileController.list.do endpoint caused by manipulating the path parameter. Exploit disclosed; remote initiation possible. Mitigations from PT-2025-10751 include disabling the /admin/file/list.do function or restricting access, and avo...

CVE-2024-56181

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC IPC PX-32A All versions V29.01.07, SIMATIC I...

CVE-2024-56182

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC Field PG M6 All versions V26.01.12, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC...

The vulnerability of the integrated controller, Satellite Management Controller (SMC), in AMD MI300X microprocessor-based software allows a intruder to execute arbitrary commands and cause malfunctions during maintenance.

The vulnerability of the integrated controller, Satellite Management Controller SMC, in the microprogrammed software of AMD MI300X processors is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands and cause...

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI, Inc. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI...