PAN-OS Unencrypted Credentials Unauthorized Access

The vulnerability of the PAN-OS operating system is related to the unencrypted storage of credentials. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Linux MIPS Core Heap Buffer Overflow DoS

The vulnerability of the cvmxpciebuildconfigaddr function in the MIPS architecture of the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

GlobalProtect Portal Bypass Security Restrictions

The vulnerability of the GlobalProtect Portal operating system PAN-OS is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

PT-2025-7914 · Nvidia +1 · Nvidia Jetson Linux +2

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson Linux and IGX OS image affected versions not specified Description: The issue is related to a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrust...

Advisory ROSA-SA-2025-2703

Software: jbig2dec 0.16 OS: ROSA Virtualization 3.0 packageevrstring: jbig2dec-0.16 CVE-ID: CVE-2020-12268 BDU-ID: 2022-05687 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the jbig2imagecompose function of the jbig2imagecompose component of the jbig2image.c decoder of the JBIG2 Jbig2dec image...

Advisory ROSA-SA-2025-2699

Software: perl-HTTP-Tiny 0.074 OS: ROSA Virtualization 3.0 packageevrstring: perl-HTTP-Tiny-0.074-2 CVE-ID: CVE-2023-31486 BDU-ID: 2023-03872 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Perl HTTP::Tiny programming language library is related to errors in the TLS certificate authentication...

Advisory ROSA-SA-2025-2698

Software: perl-CPAN 2.18 OS: ROSA Virtualization 3.0 packageevrstring: perl-CPAN-2.18-397.0.1 CVE-ID: CVE-2023-31484 BDU-ID: 2023-03871 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the CPAN.pm component of the Perl programming language is related to errors in the TLS certificate authentication...

Cisco IOS SNMP DoS

The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco IOS and Cisco IOS XE operating systems is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure remotely...

Linux USB Kernel DoS

The vulnerability of the Linux operating system’s USB kernel component is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM MSM DPU DoS

The vulnerability of DRM/MSM/DPU components in Linux operating systems is related to memory leaks. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : iniParser vulnerability (USN-7286-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7286-1 advisory. It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause iniParser to crash,...

Linux DRM AMD Display Kernel DoS

The vulnerability of DRM/AMD/display cores in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow a hacker to cause a service failure...

Eclipse OMR security vulnerabilities

Eclipse OMR is an open source toolkit from the Eclipse Foundation for building language runtime environments. A security vulnerability exists in Eclipse OMR that stems from the use of a constant length buffer for string conversion in some z/OS atoe print functions, which could lead to a buffer...

Wyn Enterprise security vulnerabilities

Wyn Enterprise is an embedded business intelligence and analytics tool from Wyn Enterprise, Inc. A security vulnerability exists in Wyn Enterprise prior to version 8.0.00204.0, which stems from a report generation feature that allows code to be included, but does not adequately restrict the code...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0479

Updates of 'curl' packages of Photon OS have been released...

TFTP Fetch

Fetch and execute a PPC64LE payload from a TFTP server. Module Options msf use payload/cmd/linux/tftp/ppc64le/meterpreterreversehttp msf payloadmeterpreterreversehttp show actions ...actions... msf payloadmeterpreterreversehttp set ACTION msf payloadmeterpreterreversehttp show options ...show and...

I-O Data Device UD-LT2: Operating System Command Injection Vulnerability

The I-O Data Device UD-LT2 is a wireless router from I-O Data Device Japan. An operating system command injection vulnerability exists in I-O Data Device UD-LT2 1.00.008SE and prior versions, which stems from the presence of a special element that is not properly neutralized, which could allow an...

net/sched Heap Buffer Overflow Info Disclosure

The vulnerability of the etsclassfromarg function in the net/sched/schets.c module of the net/sched subsystem of the Linux operating system lies in the handling of buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Elseta Vinci Protocol Analyzer: Operating System Command Injection Vulnerability

Elseta Vinci Protocol Analyzer is a software package from Elseta for engineers and developers to simulate and analyze protocols used primarily in electrical engineering systems. An operating system command injection vulnerability exists in Elseta Vinci Protocol Analyzer. An attacker exploiting th...

Cisco IOS SNMP DoS

The vulnerability of SNMP protocol implementations in Cisco IOS and IOS XE operating systems stems from operations that go beyond buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted requests...