PT-2026-27672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ems usb read bulk callback function where the system fails to properly validate message lengths. When processing data in a USB URB USB Request Block, the system...

TencentOS Server 3: kernel (TSSA-2024:1022)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1022 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

EUVD-2020-30113

Malware in sbrugna...

EUVD-2018-3651

Malware in sbrugna...

EUVD-2016-4654

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986706 advisory. In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in emspcmciaaddcard If the last channel is not available then de...

EUVD-2021-31022

Malicious code in bioql PyPI...

EUVD-2022-39838

Malicious code in bioql PyPI...

EUVD-2022-28327

Malicious code in bioql PyPI...

EUVD-2021-28183

Malicious code in bioql PyPI...

EUVD-2022-44756

Malicious code in bioql PyPI...

The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) and the FortiClient EMS Cloud cloud storage service lies in the relative path traversal during the download message processing, which allows unauthorized access to protected information.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS and its cloud storage service, FortiClient EMS Cloud, exists due to a relative path traversal vulnerability in the download message. Exploiting this vulnerability allows an attacker to compromise the integrity of the...

CVE-2023-51710

EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

CVE-2020-9287

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that...

Fortinet FortiClient EMS < 7.4.3 Path Traversal (FG-IR-24-552)

A Relative Path Traversal vulnerability CWE-23 in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to perform a limited arbitrary file write on the system via upload requests. Note that Nessus has not tested for this issue...

Security update for openssl-3

This update for openssl-3 fixes the following issues: Security: CVE-2025-27587: Timing side channel vulnerability in the P-384 implementation when used with ECDSA in the PPC architecture bsc1240366. Missing null pointer check before accessing handshakefunc in ssllib.c bsc1240607. FIPS: Disabling...

PT-2025-22646

Name of the Vulnerable Software and Affected Versions openssl-3 affected versions not specified Description The issue concerns a timing side channel vulnerability in the P-384 implementation when used with ECDSA in the PPC architecture. Additionally, there is a missing null pointer check before...

Fortinet FortiClient EMS 7.2.x / 7.4.x < 7.4.3 XSS (FG-IR-23-344)

The version of Fortinet FortiClient EMS installed on the remote host is 7.2.1 through 7.2.9 or 7.4.x prior to 7.4.3. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-344 advisory: - An improper neutralization of input during web page generation 'Cross-site Scripting'...

CVE-2025-22855

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code...

CVE-2025-22855

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code...