Critical Photon OS Security Update - PHSA-2025-5.0-91-0436

Updates of 'cups' packages of Photon OS have been released...

IBM WebSphere Automation Swagger Code Execution

The vulnerability of the Swagger interface of the IBM WebSphere Automation platform for application and service automation and deployment is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious...

Number withdrawal

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

Moxa EDR-8010 Command Structure Code Execution

The vulnerability of Moxa EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900 network devices stems from the lack of measures taken to neutralize special commands used in the operating system. Exploiting this vulnerability allows a malicious actor to execute...

ShredOS

ShredOS is a stripped-down operating system designed to destroy data. GitHub page here...

Google Android Information Disclosure Vulnerability (CNVD-2025-00875)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android Denial of Service Vulnerability (CNVD-2025-15177)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability due to a missing bounds check in the ih264dassignpicnum function in the ih264dutils.c file, which can be exploited by an attacker to cause a denial of service...

Unspecified vulnerability in Linux kernel (CNVD-2025-01677)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a delay in the final release of struct net during netns disassembly in the net module. No details of the...

IBM AIX Competitive Conditions Issue Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. IBM AIX has a security vulnerability that can be exploited by attackers to cause a denial of service...

Google Android Denial of Service Vulnerability (CNVD-2025-03020)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Linux bpf_ringbuf_reserve Heap Buffer Overflow DoS

The vulnerability of the bpfringbufreserve function in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

BeyondTrust Privileged Remote Access (PRA) <= 24.3.1 Multiple Vulnerabilities

The version of BeyondTrust Privileged Remote Access PRA running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by multiple vulnerabilities. - All BeyondTrust Privileged Remote Access PRA versions contain a command injection vulnerability which can be...

BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-10)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by a command injection vulnerability. - All BeyondTrust Remote Support RS versions contain a command injection vulnerability which can be exploited through a...

.NET 5.0.9 Update

.NET 5.0.9 Update Applies To .NET 5.0 .NET 5.0 has been refreshed with the latest update as of August 10, 2021. This update contains reliability and other non-security fixes. See the release notes for details on updated packages. .NET 5.0 servicing updates are upgrades. The latest servicing updat...

Update Rollup 2.1 for System Center 2016 Virtual Machine Manager

Update Rollup 2.1 for System Center 2016 Virtual Machine Manager Applies To System Center 2016 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 2.1 for Microsoft System Center 2016 Virtual Machine Manager. There are two updates available for...

Tiki wiki CMS operating system command injection vulnerability

Tiki wiki cms is a website CMS. An operating system command injection vulnerability exists in versions of Tiki Wiki CMS prior to version 28, which stems from an improper neutralization of special elements used in operating system commands, resulting in an operating system command injection...

PT-2024-32893 · Unknown · Tiki Wiki Cms

Name of the Vulnerable Software and Affected Versions: Tiki Wiki CMS affected versions not specified Description: The issue is related to improper neutralization of script-related HTML tags in a web page, which can lead to basic XSS attacks. Additionally, there is a mention of improper...

CVE-2024-56729

In the Linux kernel, the following vulnerability has been resolved: smb: Initialize cfid-tcon before performing network ops Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cacheddirleasebreak and...

CVE-2024-56742

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

CVE-2024-56712

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix memory leak on last exportudmabuf error path In exportudmabuf, if dmabuffd fails because the FD table is full, a dmabuf owning the udmabuf has already been created; but the error handling in udmabufcreate will tear...