CVE-2025-54612

CVE-2025-54612 concerns Huawei HarmonyOS card management module where an iterator failure vulnerability can affect function stability. Documents across NVD, RH/Red Hat, CNVD, CVE lists describe the issue as an iterator failure in the card management module, with impact stated as potential stabili...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an Iterator Failure vulnerability that can be exploited by attackers to affect functional stability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An iterator failure vulnerability exists in the Huawei HarmonyOS card management module, which can be exploited by attackers to affect functional stability...

PT-2025-32068

Name of the Vulnerable Software and Affected Versions cjwindow affected versions not specified Description A pointer dangling issue exists in the cjwindow module. Successful exploitation may affect function stability. Recommendations At the moment, there is no information about a newer version th...

PT-2025-32019 · Unknown · Card Management Module

Name of the Vulnerable Software and Affected Versions: card management module affected versions not specified Description: An iterator failure exists within the card management module. Successful exploitation of this issue may affect function stability. Recommendations: At the moment, there is no...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A pointer dangling vulnerability exists in the Huawei HarmonyOS cjwindow module, which can be exploited by an attacker to cause functional stability to be...

PT-2025-32020 · Unknown · Card Management Module

Name of the Vulnerable Software and Affected Versions: card management module affected versions not specified Description: An iterator failure exists within the card management module. Successful exploitation of this issue may affect function stability. Recommendations: At the moment, there is no...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1759)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2022-48925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle the...

CVE-2025-48071

A heap based-buffer overflow flaw was found in OpenEXR. In affected versions, there is a heap-based buffer overflow during a write operation when decompressing ZIPS-packed deep-scan-line EXR files with a maliciously forged chunk header. Mitigation Mitigation for this issue is either not available...

CVE-2025-54388

A firewall state management issue was found in the Moby project. When the firewalld service is reloaded, it removes all iptables rules, including those created by Docker. While Docker should automatically recreate these rules, versions before 28.3.3 fail to recreate the specific rules that block...

MongoDB 8.0.x < 8.0.10 DoS (SERVER-106751)

The version of MongoDB installed on the remote host is 8.0 prior to 8.0.10. It is, therefore, affected by a vulnerability as referenced in the SERVER-106751 advisory. - MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition...

CVE-2025-54419

A signature verification flaw was found in the npm @node-saml/node-saml library. This flaw allows an attacker who has access to a validly signed document from the identity provider IdP to alter the content of the document, modify the details within the document, and have the modifications be...

CVE-2025-38397

CVE-2025-38397 is a Linux kernel vulnerability related to a suspicious RCU usage warning in nvme_mpath_add_sysfs_link() during NVMe over TCP tests. The connected SUSE/OpenSUSE advisories confirm a kernel fix addressing this RCU warning (nvme-multipath) in the Linux kernel, and indicate an updated...

CVE-2025-38379 smb: client: fix warning when reconnecting channel

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2reconnectserver, a dummy tcon is passed down to smb2reconnect with -queryinterface uninitialized, so we can't call queuedelayedwork on it. Fix...

CVE-2025-54566

A flaw was found in QEMU. A migration state inconsistency within the pciesriov emulation code allows an attacker with adjacent network access to trigger unexpected behavior. This condition arises from a state mismatch during migration processes, which can potentially lead to resource exhaustion...

NewStart CGSL MAIN 7.02 : python-cryptography Multiple Vulnerabilities (NS-SA-2025-0151)

The remote NewStart CGSL host, running version MAIN 7.02, has python-cryptography packages installed that are affected by multiple vulnerabilities: - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto woul...

NewStart CGSL MAIN 7.02 : avahi Multiple Vulnerabilities (NS-SA-2025-0174)

The remote NewStart CGSL host, running version MAIN 7.02, has avahi packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in Avahi. A reachable assertion exists in the avahialternativehostname function. CVE-2023-38473 - A flaw was found in avahi in versions...

CVE-2025-50151

A file path validation flaw has been discovered in Apache Jena. This flaw allows users with administrative access to upload arbitrary configurations. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2025-48965

A flaw was found in mbedtls. The mbedtlsasn1storenameddata function experiences a NULL pointer dereference when val.p is NULL while val.len is greater than zero, leading to a potential crash. This flaw allows a network-based attacker to trigger this condition, resulting in a denial of service...