EUVD-2025-33250

Transient DOS while processing video packets received from video firmware...

CVE-2025-27041 Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware...

CVE-2025-27041 Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware...

CVE-2025-27040

CVE-2025-27040 affects Qualcomm TZ Firmware in chipsets; root cause is improper input validation when processing hypervisor logs, leading to information disclosure (confidentiality impact). Reported across Red Hat/NVD/CVE listings with no confirmed exploit details. Some sources note no public fix...

EUVD-2025-33243

Information disclosure may occur while processing the hypervisor log...

PT-2025-41352

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-47351 Description A memory corruption issue exists when processing user-supplied buffers. This can potentially lead to unexpected behavior or compromise of the system. Recommendations At the moment, there is no informati...

PT-2025-41337

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Information disclosure may occur while processing the hypervisor log. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-41454

Name of the Vulnerable Software and Affected Versions New API versions prior to 0.9.0.5 Description New API is a large language model LLM gateway and artificial intelligence AI asset management system. An authenticated Server-Side Request Forgery SSRF issue exists because the application does not...

SUSE SLES15 Security Update : kernel RT (Live Patch 10 for SLE 15 SP6) (SUSE-SU-2025:03495-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03495-1 advisory. This update for the Linux Kernel 6.4.0-1506001034 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched:...

PT-2025-41343

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-27054 Description A memory corruption issue exists when processing a malformed license file during reboot. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-41339

Name of the Vulnerable Software and Affected Versions Video driver affected versions not specified Description An information disclosure issue exists while processing batch command execution in the Video driver. Recommendations At the moment, there is no information about a newer version that...

PT-2025-41351

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when processing an escape call. The issue could potentially allow for unexpected behavior or code execution. Recommendations At the moment, there is no information...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex version 5.0.14. Vulnerability Details CVEID:CVE-2025-55193 DESCRIPTION: Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may ...

CVE-2025-11478

A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the...

Vulnerability fixed in Oracle E-Business Suite

Oracle has fixed a vulnerability in Oracle E-Business Suite Specifically for the Concurrent Processing component in versions 12.2.3 to 12.2.14. The vulnerability is located in the Concurrent Processing component of the Oracle E-Business Suite. Unauthenticated attackers can exploit this...

CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

Linux Distros Unpatched Vulnerability : CVE-2022-50494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crash When CPU 0 is offline and intelpowerclamp is used to inject idle, it generates...

Linux Distros Unpatched Vulnerability : CVE-2023-53628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: drop gfxv110cpeccerrorirqfuncs The gfx.cpeccerrorirq is retired in gfx11. In gfxv110hwfini still use amdgpuirqput to disable this interrupt, which...

openSUSE 15 Security Update : logback (SUSE-SU-2025:03456-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03456-1 advisory. - CVE-2025-11226: fixed the ACE vulnerability in conditional configuration file processing bsc1250715 Tenable has extracted the preceding description block...

itsourcecode Student Transcript Processing System SQL注入漏洞

itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Transcript Processing System, which stems from an incorrect manipulation of the parameter uname in the...