53 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: mptcp: handles DDS corruption consistently. The buggy peer implementation can send corrupted DSS options, consistently causing several warnings in the data path. Use DEBUGNET assertions to avoid errors on some builds and to handl...
CVE-2026-51650: Improper Access Control
Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
SQL
The Teaching Management Information Service Platform focuses on cultivation, operation, assurance, and monitoring. It achieves a combination of routine and strategic management of educational affairs, meeting the strategic needs of schools in terms of process management, teaching quality...
CLSA-2026-1776765273 net-snmp: Fix of CVE-2022-24810
CVE-2022-24810: fix NULL pointer dereference and bounds checking in MIB handlers...
CVE-2026-1772
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges...
CVE-2026-1772
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges...
EUVD-2026-8460
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges...
CVE-2026-1772
CVE-2026-1772 concerns the RTU500 web interface, where an unprivileged user can read user management information. The vulnerability does not require UI access and can be exploited via browser developer tools, with no user interaction and network-based access. The CVSS 4.0 vector indicates: AV:N/A...
PT-2026-21676
Name of the Vulnerable Software and Affected Versions RTU500 affected versions not specified Description An unprivileged user can read user management information through the RTU500 web interface. Accessing this information requires tools like browser development utilities and does not occur...
CVE-2025-11959: Files or Directories Accessible to External Parties
Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse. This issue affects Excavation...
Beyaz CityPLus 安全漏洞
Beyaz CityPLus is an integrated management information system from Beyaz Turkey. A security vulnerability exists in Beyaz CityPLus versions prior to V24.29500.1.0, which stems from the exposure of sensitive information and could lead to unauthorized access...
EUVD-1999-1494
Malware in sbrugna...
EUVD-2024-53897
Malicious code in bioql PyPI...
PT-2025-35099
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.3.2 Description Nagios XI is susceptible to remote code execution due to chained flaws: an arbitrary file upload and a path traversal within the Core Config Snapshots interface. Insufficient validation of fil...
Linux Distros Unpatched Vulnerability : CVE-2020-14947
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mibfile in...
CVE-2025-33059
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-33060
CVE-2025-33060 affects the Windows Storage Management Provider and is described as an out-of-bounds read that can allow an authorized, locally authenticated attacker to disclose information. The NCSC advisory confirms it under Windows Storage Management Provider with CVSS 5.5 (LOCAL, Privileges L...
Windows Storage Management Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2022-30601
Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access...
