UBUNTU-CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

UBUNTU-CVE-2025-40173

In the Linux kernel, the following vulnerability has been resolved: net/ip6tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-neededheadroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd "net: iptunnel: prevent...

CVE-2025-40158

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output Use RCU in ip6output in order to use dstdevrcu to prevent possible UAF. We can remove rcureadlock/rcureadunlock pairs from ip6finishoutput2...

EulerOS 2.0 SP10 : cloud-init (EulerOS-SA-2025-2408)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init defau...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ip6output not using RCU to protect dstdevrcu access, which could lead to reuse after release...

CVE-2016-15055: Improper Limitation of a Pathname to a Restricted Directory

JVC VN-T IP-camera models firmware versions up to 2016-08-22 confirmed on the VN-T216VPRU model contain a directory traversal vulnerability in the checkcgi endpoint that accepts a user-controlled file parameter. An unauthenticated remote attacker can leverage this vulnerability to read arbitrary...

CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

CVE-2025-52331

A Cross-site scripting (XSS) vulnerability exists in the generate report functionality of Rarlab WinRAR 7.11 . The root cause is the inclusion of archived file names in the HTML report without proper validation, which allows for the injection of malicious HTML tags. Successful exploitation requir...

CVE-2025-40816

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions V1.84.05, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions V1.84.05, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions V1.84.05, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions V1.84.05, LOGO! 24CE 6ED1052-1CC08-0BA2 Al...

EUVD-2025-106749

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions, LOGO! 24CE 6ED1052-1CC08-0BA2 All versions, LOGO! 24CEo...

CVE-2025-40816

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions V1.84.05, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions V1.84.05, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions V1.84.05, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions V1.84.05, LOGO! 24CE 6ED1052-1CC08-0BA2 Al...

CVE-2025-40816

Siemens LOGO! 12/24RCE, LOGO! 230RCE, LOGO! 24CE and SIPLUS variants (all versions listed) are affected by CVE-2025-40816. Affected devices do not perform certain validations when interacting with them, which could allow an unauthenticated remote attacker to manipulate the device’s IP address, ma...

Amazon Linux 2023 : soci-snapshotter (ALAS2023-2025-1277)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1277 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...

CVE-2025-40816: Missing Authentication for Critical Function

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions V1.84.05, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions V1.84.05, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions V1.84.05, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions V1.84.05, LOGO! 24CE 6ED1052-1CC08-0BA2 Al...

PT-2025-51654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the IPv4 routing mechanism related to stale function handle exceptions fnhe. Specifically, the rt bind exception function can rebind to a function...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2025-074 (ALASNITRO-ENCLAVES-2025-074)

The version of containerd installed on the remote host is prior to 2.1.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-074 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other tha...

Important: oci-add-hooks

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

Important: soci-snapshotter

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

Important: containerd

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

Important: containerd

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...