3827 matches found
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: In the ftrace function, a potential warning was fixed in traceprintkseq during ftracedump. When ftracedumpone is called concurrently with reading from tracepipe, a WARNONONCE message can be triggered due to a race condition. The...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: The warning caused by the missing unregister notifier has been fixed. This warning was triggered during testing on v6.16: notifier Callback ftracesuspendnotifiercall is already registered WARNING: CPU: 2, PID: 86, i...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Tracing: Add downwritetraceeventsem when adding a trace event. When a module is loaded, it adds trace events defined by that module. It may also be necessary to modify the module’s trace printk formats by replacing enum names wit...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: RCU: Fixed a deadloop in rcureadunlock due to IRQ work. During rcureadunlockspecial, if this occurs during irqexit, we may get locked up if an IPI is issued. This is because the IPI itself triggers the irqexit path, causing a...
CVE-2025-54459
Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain live request traces and sensitive information such as request metadata, session identifiers, authorization headers, serve...
CVE-2025-54459
Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain live request traces and sensitive information such as request metadata, session identifiers, authorization headers, serve...
CVE-2025-54459
Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain live request traces and sensitive information such as request metadata, session identifiers, authorization headers, serve...
CVE-2025-54459 Vertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere
Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain live request traces and sensitive information such as request metadata, session identifiers, authorization headers, serve...
CVE-2025-54459 Vertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere
Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain live request traces and sensitive information such as request metadata, session identifiers, authorization headers, serve...
CVE-2025-54459
Vulnerability summary: CVE-2025-54459 affects the Hospital Manager Backend Services (Vertikal Systems), where the ASP.NET tracing endpoint /trace.axd was exposed without authentication before 19 September 2025. This allowed remote attackers to obtain live request traces and sensitive data such as...
Vertikal Systems Hospital Manager Backend Services 安全漏洞
Vertikal Systems Hospital Manager Backend Services is a hospital information management system from Vertikal Systems, Romania. A security vulnerability exists in Vertikal Systems Hospital Manager Backend Services versions prior to September 19, 2025, which stems from the exposure of an...
PT-2025-44349
Name of the Vulnerable Software and Affected Versions Hospital Manager Backend Services versions prior to September 19, 2025 Description The Hospital Manager Backend Services exposed the ASP.NET tracing endpoint ''/trace.axd'' without authentication before September 19, 2025. This allowed a remot...
Siemens SIMATIC Devices Out-of-bounds Read (CVE-2021-38202)
fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd. This plugin only works with Tenable.ot. Please visit...
EUVD-2022-54694
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix call trace observed during I/O with CMF enabled The following was seen with CMF enabled: BUG: using smpprocessorid in preemptible code: systemd-udevd/31711 kernel: caller is lpfcupdatecmfcmd+0x214/0x420 lpfc kerne...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987715)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987715 advisory. In the Linux kernel, the following vulnerability has been resolved: traceeventshist: add check for return value of 'createhistfield' Function 'createhistfield' is...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987614)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987614 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...
EUVD-2025-35034
Malicious code in user-trace-fingerprint npm...
Malicious code in user-trace-fingerprint (npm)
The package user-trace-fingerprint was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54bd77b470e3a22898330418ebfb04770ae12aa0de66208968d637cca6c03f2 Any computer that has this package installed or running should be considered full...
MAL-2025-48525 Malicious code in user-trace-fingerprint (npm)
The package user-trace-fingerprint was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54bd77b470e3a22898330418ebfb04770ae12aa0de66208968d637cca6c03f2 Any computer that has this package installed or running should be considered full...