EUVD-2025-5213

Malicious code in bioql PyPI...

EUVD-2025-13990

Malicious code in bioql PyPI...

EUVD-2023-0874

Malicious code in bioql PyPI...

EUVD-2024-53249

Malicious code in bioql PyPI...

EUVD-2024-53247

Malicious code in bioql PyPI...

EUVD-2022-55325

Malicious code in bioql PyPI...

CVE-2025-52853

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-52432 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

EUVD-2025-32348

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

PT-2025-40580

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker, having obtained administrator privileges, can trigger a denial-of-service DoS...

QNAP operating system 代码问题漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

PT-2025-40551

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.1 Description A flaw exists in Qsync Central that allows a remote attacker, having obtained a user account, to trigger a denial-of-service DoS attack due to a NULL pointer dereference. Recommendations Upda...

CVE-2025-39895

In the Linux kernel, the following vulnerability has been resolved: sched: Fix schednumafindnthcpu if mask offline schednumafindnthcpu uses a bsearch to look for the 'closest' CPU in scheddomainsnumamasks and given cpus mask. However they might not intersect if all CPUs in the cpus mask are...

CVE-2023-53472

In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single output which is registered as the only PWM device/channel per controller, it is known in advance that pwm-hwpwm value is always 0. O...

CVE-2025-39906

CVE-2025-39906 relates to the Linux kernel drm/amd/display path where the OEM I2C adapter could remain registered after GPU unbind, risking a null pointer dereference when apps access the invalid device. The issue has been fixed by removing the OEM I2C adapter on process finish (cherry-pick of co...

The vulnerability in the drivers/firmware/qcom/qcom_scm.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/firmware/qcom/qcomscm.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libssh (SUSE-SU-2025:03369-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03369-1 advisory. - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management...

CVE-2025-23346

NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of service...

axboe fio options.c str_buffer_pattern_cb null pointer dereference

...

CVE-2025-39878

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash after fscryptencryptpagecacheblocks error The function movedirtyfolioinpagearray was created by commit ce80b76dd327 "ceph: introduce cephprocessfoliobatch method" by moving code from cephwritepagesstart to this...