Qualcomm BT Controller Unauthorized Access

The vulnerability of the BT Controller component in the microprogramming software of Qualcomm’s integrated chips is related to data encryption errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Qualcomm Heap Buffer Overflow

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code, cause service failures, or gain unauthorized access to protected information...

org.javaloong.kongmink.keycloak:keycloak-embedded-server (1.1.0), org.keycloak:keycloak-dependencies-server-all (19.0.3) +9 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (19.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.javaloong.kongmink.keycloak:keycloak-embedded-server 1.1.0 -...

Security update for buildah

This update for buildah fixes the following issues: CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237681 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for buildah

This update for buildah fixes the following issues: CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237681 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

DEBIAN-CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2024-7872

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data. This issue affects Extreme XDS: before 3933...

CVE-2024-7872

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data. This issue affects Extreme XDS: before 3933...

CVE-2024-7872

CVE-2024-7872 describes an information exposure in ExtremePACS Extreme XDS prior to version 3933, where insertion of sensitive data into sent data could allow retrieval of embedded sensitive information. Affected product: Extreme XDS (ExtremePACS). Underlying issue: data handling that permits emb...

PT-2025-9915

Name of the Vulnerable Software and Affected Versions Extreme XDS versions prior to 3933 Description The issue allows for the insertion of sensitive information into sent data, enabling the retrieval of embedded sensitive data. Recommendations For versions prior to 3933, update to version 3933 or...

CVE-2024-7872: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data. This issue affects Extreme XDS: before 3933...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: OSV:GHSA-93QR-H8PR-4593...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: GHSA-93QR-H8PR-4593...

org.openidentityplatform.openam:embedded.opendj (>=14.5.2.1, <=15.0.0.1), org.openidentityplatform.openam:openam-slf4j (>=14.5.2, <=15.1.4) +6 more potentially affected by CVE-2025-27497 via org.openidentityplatform.opendj:opendj-server-legacy (>=4.4.7, <=4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =4.4.7, =14.5.2.1, =14.5.2, =4.4.12, =4.6.4, =4.4.7, =4.4.7, =4.4.7, =4.4.15, =4.9.2 Source cves: CVE-2025-27497 Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-9296373...

Embedded Malicious Code

Overview cdn-icon-fetcher-help is a Malicious package. Affected versions of this package are vulnerable to Embedded Malicious Code. Once this package is installed and executed, it downloads a Javascript file from a cdn-static-seven.vercel.app URL, which appears to be an image hosting site. Howeve...

Embedded Malicious Code

Overview cdn-icon-fetch is a Malicious package. Affected versions of this package are vulnerable to Embedded Malicious Code. Once this package is installed and executed, it downloads a Javascript file from a cdn-static-server.vercel.app URL, which appears to be an image hosting site. However, by...

CVE-2025-1080

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

Linux Distros Unpatched Vulnerability : CVE-2022-29078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is...

Linux Distros Unpatched Vulnerability : CVE-2017-3526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u141,...

Linux Distros Unpatched Vulnerability : CVE-2017-3511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u131 a...