kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...

CVE-2024-14009

Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System Profile component. The System Profile feature is an administrative diagnostic/configuration capability. Due to improper access controls and unsafe handling of exported/imported profile data and...

Siemens SIMATIC Devices Improper Removal of Sensitive Information Before Storage or Transfer (CVE-2024-26816)

x86, relocs: relocations in .notes section. When building with CONFIGXENPV=y, .text symbols are emitted into the .notes section so that Xen can find the startupxen entry point. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

WordPress plugin Addison 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A deserialization vulnerability exists in the WordPress plugin Addison, which arises from unsaf...

PT-2025-43212

Name of the Vulnerable Software and Affected Versions gAppointments versions through 1.14.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This allows for Reflected XSS attacks...

PT-2025-43216

Name of the Vulnerable Software and Affected Versions Rajan Vijayan WP Smart Flexslider versions through 2.5 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Cross-site Scripting XSS. This allows an attacker to...

PT-2025-43226

Name of the Vulnerable Software and Affected Versions CropRefine versions through 1.2.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Reflected Cross-Site Scripting XSS condition. This could allow an attacke...

Huawei HarmonyOS package management module data handling error vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A data handling error vulnerability exists in the Huawei HarmonyOS package management module, which can be exploited by attackers to affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A data handling error vulnerability exists in the Huawei HarmonyOS package management module, which can be exploited by attackers to affect availability...

PT-2025-41528

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the reading of image data within Samsung Notes. This allows a local attacker to access memory outside of the intended boundaries. Recommendations Updat...

AlmaLinux 10 : libarchive (ALSA-2025:14137)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:14137 advisory. libarchive: Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c CVE-2025-5914 Tenable has extracted the preceding description block...

SUSE CVE-2022-50536

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict redirection, the eval variable is assigned to SKREDIRECT after the applybytes data is sent, if msg has moredata, sockput will be called multip...

EUVD-2020-23729

Malware in sbrugna...

EUVD-2020-8190

Malware in sbrugna...

EUVD-2016-8725

Malware in sbrugna...

EUVD-2020-12466

Malware in sbrugna...

EUVD-2020-4316

Malware in sbrugna...

EUVD-1999-0584

Malware in sbrugna...

EUVD-2018-20219

Malware in sbrugna...

EUVD-2017-8455

Malware in sbrugna...