PT-2025-41343

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-27054 Description A memory corruption issue exists when processing a malformed license file during reboot. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-41352

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-47351 Description A memory corruption issue exists when processing user-supplied buffers. This can potentially lead to unexpected behavior or compromise of the system. Recommendations At the moment, there is no informati...

PT-2025-41339

Name of the Vulnerable Software and Affected Versions Video driver affected versions not specified Description An information disclosure issue exists while processing batch command execution in the Video driver. Recommendations At the moment, there is no information about a newer version that...

Tenda AC20 strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in the microprogramming router Tenda AC20 is related to the operation of writing data beyond the buffer boundaries during the processing of the MAC parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

TOTOLINK X6000R Set WiFi Acl Rules Command Execution

The vulnerability of the setWiFiAclRules function in the TOTOLINK X6000R router software lies in the lack of measures taken to neutralize special elements during the processing of the desc parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

SUSE SLES15 Security Update : kernel RT (Live Patch 10 for SLE 15 SP6) (SUSE-SU-2025:03495-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03495-1 advisory. This update for the Linux Kernel 6.4.0-1506001034 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched:...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex version 5.0.14. Vulnerability Details CVEID:CVE-2025-55193 DESCRIPTION: Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may ...

CVE-2025-11478

A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the...

Vulnerability fixed in Oracle E-Business Suite

Oracle has fixed a vulnerability in Oracle E-Business Suite Specifically for the Concurrent Processing component in versions 12.2.3 to 12.2.14. The vulnerability is located in the Concurrent Processing component of the Oracle E-Business Suite. Unauthenticated attackers can exploit this...

CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

Itsourcecode Student Transcript Processing System SQL Injection Vulnerability

itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Transcript Processing System, which stems from an incorrect manipulation of the parameter uname in the...

CVE-2025-11434: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

NVIDIA CUDA Toolkit nvdisasm Code Execution

The vulnerability of the nvdisasm tool in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Tenda AC18 Router DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC18 router’s microprogramming software is related to the issue of writing operations outside of the buffer in memory when processing the mac parameter. Exploiting this vulnerability could allow a malicious actor to cause service...

Netty HTTP Request Processing

The vulnerability of the Netty network programming framework is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out attacks by replacing HTTP requests with malicious content...

Linux Distros Unpatched Vulnerability : CVE-2022-50490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htablockbucket to userspace In htabmaplookupanddeletebatch if...

SUSE SLES15 Security Update : kernel RT (Live Patch 11 for SLE 15 SP6) (SUSE-SU-2025:03470-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03470-1 advisory. This update for the Linux Kernel 6.4.0-1506001039 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched:...

openSUSE 15 Security Update : logback (SUSE-SU-2025:03456-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03456-1 advisory. - CVE-2025-11226: fixed the ACE vulnerability in conditional configuration file processing bsc1250715 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2023-53628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: drop gfxv110cpeccerrorirqfuncs The gfx.cpeccerrorirq is retired in gfx11. In...

Linux Distros Unpatched Vulnerability : CVE-2022-50494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crash When CPU 0 is offline and intelpowerclamp is used to inject idle, it generates...