EUVD-2025-13307

Malicious code in bioql PyPI...

Tenda AC21 sscanf Code Execution

The vulnerability of the sscanf function in Tenda AC21 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Rockwell Automation Arena Code Execution

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel system failure

The vulnerability of the kernel component in Linux operating systems is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

netmem DoS

The vulnerability of the netmem component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux op_init_lcd_dma Heap Buffer Overflow DoS

The vulnerability of the opinitlcddma function in the lcddma.c component of the Linux kernel relates to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux securityfs Heap Buffer Overflow DoS

The vulnerability in the security/safesetid/securityfs.c component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Component am65_cpsw_nuss_remove_tx_chns Heap Buffer Overflow DoS

The vulnerability of the am65cpsw-nuss.c component’s am65cpswnussremovetxchns function in the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux bpf_jit_comp Component DoS

The vulnerability of the bpfjitcomp.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

netfilter DoS

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Block Component DoS

The vulnerability of the block component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

OESA-2025-2336 python-xmltodict security update

Python module that makes working with XML feel like you are working with JSON Security Fixes: XML Injection vulnerability in xmltodict allows Input Data Manipulation.This issue affects xmltodict: 0.14.2.CVE-2025-9375...

CVE-2025-27036

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036

CVE-2025-27036 concerns Qualcomm chipsets with a vulnerability in the Video engine’s handling of input data smaller than the expected minimum size. Root cause: a buffer/processing mismatch in the video engine leads to information disclosure. Affected: Qualcomm chipsets (Video engine component); e...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from the video engine escaping input data smaller than the expected minimum size, which could lead to information disclosure...

PT-2025-39274

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description An information disclosure issue exists when the video engine processes input data that is smaller than the expected minimum size. This can lead to the disclosure of sensitive information. Approximately 1000...

CVE-2025-8276

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-8276 HTML Injection in Patika Global Technologies' HumanSuite

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

PT-2025-37992

Name of the Vulnerable Software and Affected Versions HumanSuite versions prior to 53.21.0 Description HumanSuite is susceptible to multiple issues including improper encoding or escaping of output, improper neutralization of special elements in output used by a downstream component injection,...