PT-2025-11116

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A Denial of Service DoS issue in the software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent...

PT-2025-11311

Name of the Vulnerable Software and Affected Versions OpenCV affected versions not specified Description The software contains a heap-buffer-overflow read issue. The crash state indicates the issue occurs within the cv::PngDecoder::compose frame function, triggered by...

Amazon Linux 2 : thunderbird (ALAS-2025-2789)

The version of thunderbird installed on the remote host is prior to 128.7.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2789 advisory. A permission leak could have occurred from a trusted site to an untrusted site via embed or object elements. This...

net: hsr: avoid potential out-of-bound access in fill_frame_info()

...

PT-2025-10048

Name of the Vulnerable Software and Affected Versions Flexmls® IDX Plugin versions up to, and including, 3.14.27 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the 'idx frame' shortcode. Thi...

Important: thunderbird

Issue Overview: A permission leak could have occurred from a trusted site to an untrusted site via embed or object elements. This vulnerability affects Firefox 132, Firefox ESR 128.4, Firefox ESR 115.17, Thunderbird 128.4, and Thunderbird 132. CVE-2024-10458 An attacker could have caused a...

Important: thunderbird

Issue Overview: A permission leak could have occurred from a trusted site to an untrusted site via embed or object elements. This vulnerability affects Firefox 132, Firefox ESR 128.4, Firefox ESR 115.17, Thunderbird 128.4, and Thunderbird 132. CVE-2024-10458 An attacker could have caused a...

CVE-2024-49836

Memory corruption may occur during the synchronization of the cameras frame processing pipeline...

Linux Distros Unpatched Vulnerability : CVE-2023-52580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETHP1588 flow dissector When a PTP ethernet raw frame with a size of more than...

Linux Distros Unpatched Vulnerability : CVE-2024-41091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the...

Linux Distros Unpatched Vulnerability : CVE-2023-37271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment...

GHSA-3JXR-23PH-C89G Duplicate Advisory: Wildfly Elytron integration susceptible to brute force attacks via CLI

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qhp6-6p8p-2rqh. This link is maintained to preserve external references. Original Description A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent...

Linux Distros Unpatched Vulnerability : CVE-2020-26143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frame...

Linux Distros Unpatched Vulnerability : CVE-2021-28165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame...

CVE-2024-49836

Memory corruption may occur during the synchronization of the cameras frame processing pipeline...

CVE-2024-49836 Improper Validation of Array Index in Camera

Memory corruption may occur during the synchronization of the cameras frame processing pipeline...

CVE-2024-49836: Improper Validation of Array Index

Memory corruption may occur during the synchronization of the cameras frame processing pipeline...

PT-2025-9299

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Memory corruption may occur during the synchronization of the camera's frame processing pipeline. Recommendations At the moment, there is no information about a newer version that contains a f...

OESA-2025-1184 etcd security update

%expand: Security Fixes: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large...

SUSE CVE-2025-21775

In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If skb allocation fails, the pointer to struct canframe is NULL. This is actually handled everywhere inside ctucanerrinterrupt except for the only place. Add the missed NULL check. Fou...