38944 matches found
Huawei EulerOS: Security Advisory for iputils (EulerOS-SA-2025-2229)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-41771
Name of the Vulnerable Software and Affected Versions Uniweb/SoliPACS WebServer developed by EBM Technologies affected versions not specified Description A missing authentication issue exists in Uniweb/SoliPACS WebServer developed by EBM Technologies. This allows unauthenticated remote attackers ...
EBM Uniweb/SoliPACS WebServer Access Control Vulnerability
EBM Uniweb/SoliPACS WebServer is a medical image archiving and communication system from Enterprise Business Machine EBM, Inc. of Taiwan, China. An access control error vulnerability exists in the EBM Uniweb/SoliPACS WebServer that stems from a lack of authentication, which could allow an...
PT-2025-41741
Name of the Vulnerable Software and Affected Versions UTT HiPER 2620G versions through 3.1.4 Description A flaw exists in UTT HiPER 2620G up to version 3.1.4. The strcpy function within the /goform/fNTP file is susceptible to a buffer overflow when the NTPServerIP argument is manipulated. This...
F5 Networks BIG-IP : IPMI vulnerability (K000156992)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000156992 advisory. AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-28863 Tenable has...
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts
Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments. "Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that...
OESA-2025-2361 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...
CVE-2025-11618 Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP
A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the...
EUVD-2025-33752
A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the...
CVE-2025-11618 Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP
A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the...
CVE-2025-11618
CVE-2025-11618 affects FreeRTOS-Plus-TCP’s UDP/IPv6 packet processing. The vulnerability is a missing validation check that can cause an invalid pointer dereference when a UDP/IPv6 packet carries an incorrect IP version field within IPv6 traffic. Impact is limited to IPv6-enabled applications; no...
MAL-2025-191843 Malicious code in python3-6 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d48e27507362baa15b8e41d1554bce82077fcc870112ab6cb4d17694b47c8ef3 During installation, the obfuscated code is run and connect with a remote server. In the current version, the code just opens a URL without exfiltrating any...
BIG-IP Local Traffic Manager SSL Profile Handler DoS
The vulnerability of the SSL profile handler function of the BIG-IP Local Traffic Manager client controller application relates to the swapping of pointers. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
BIG-IP Access Policy Manager DoS
The vulnerability of the control traffic management micro-atom of the BIG-IP Access Policy Manager lies in buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2025-48828
Уязвимость функций get mac from ip и get ip from mac микропрограммного обеспечения маршрутизаторов Linksys E1200 связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код или вызвать отказ в обслуживании...
PT-2025-41405
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX4700 versions 24.4 through 24.4R2 Description A Use of Uninitialized Resource issue exists in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX4700 devices. This allows an unauthenticated,...
PT-2025-48872
Уязвимость модулей include/net/ip tunnels.h, net/ipv4/ip tunnel.c, net/ipv6/ip6 tunnel.c ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2025-44394
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s ixgbevf driver had an issue with mailbox API compatibility. The driver experienced discrepancies due to the introduction of features specific to certain drivers like...
SUSE CVE-2023-53635
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct-timeout value struct nfconn-timeout is an interval before the conntrack confirmed. After confirmed, it becomes a timestamp. It is observed that timeout of an unconfirmed conntrack: - Set by...
