47400 matches found
CVE-2025-71127: Improper Input Validation
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadcast address Beacon frames are required to be sent to the broadcast address, see IEEE Std 802.11-2020, 11.1.3.1 "The Address 1 field of the Beacon .. frame shall be set to the...
CVE-2025-71127: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames to non-broadcast address Beacon frames are required to be sent to the broadcast address, see IEEE Std 802.11-2020, 11.1.3.1 "The Address 1 field of the Beacon .. frame shall be set to the...
ROS-20260114-7313
A vulnerability in the drm/dpmst component of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause denial of service...
Dingtian DT-R002 Registration Data Access
The vulnerability of the microprogramming software for relay boards of Dingtian DT-R002 is related to insufficient protection of registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to the protected information...
Veritas Appliance Backup Server XSS
The vulnerability of the Veritas Appliance data backup server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely and cause service failures...
Netigma Application Development Platform XSS
The vulnerability of the Netigma application development platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
NPort 5000 Series UART Interface Unauthorized Access
The vulnerability of the UART interface in NPort 5000 Series industrial server software-based applications is related to insufficient protection of service data during code debugging. Exploiting this vulnerability can allow attackers to gain unauthorized access to internal debugging functions...
MicroWorld eScan Antivirus passPrompt() Code Execution
The vulnerability of the passPrompt function in the USB Protection Service component of the MicroWorld eScan Antivirus antivirus software for Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...
SAP S/4HANA SQL Injection Unauthorized Access
The vulnerability of the SAP S/4HANA software platform lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries...
Windows File Explorer Disclosure
The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Windows File Explorer Disclosure
The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Linux Distros Unpatched Vulnerability : CVE-2025-71140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context list protection lock Previously a mutex wa...
MiracleLinux 3 : kernel-2.6.18-8.17AXS3 (AXSA:2008-82:04)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-82:04 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. CVE-2007-5498: The Xen hypervisor block backend driver for Linux...
Protection Mechanism Failure
Overview enclave-vm is a Sandbox runtime for secure JavaScript code execution Affected versions of this package are vulnerable to Protection Mechanism Failure via the exposure of a host-side Error object to sandboxed code, which retains its host realm prototype chain. An attacker can intentionall...
CVE-2025-69271
Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier...
CVE-2025-65552
D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication channel. The system does not implement rolling codes, message authentication, or anti-replay protection, allowing an attacker within RF range to record valid alarm/control frames an...
CVE-2026-22603
OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, OpenProject’s unauthenticated password-change endpoint /account/changepassword was not protected by the same brute-force safeguards that apply to the normal login form. In affected versions, an attacker...
CVE-2026-20824
Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...
