5399 matches found
CVE-2020-36914
CVE-2020-36914 affects QiHang Media Web Digital Signage 3.0.9. The issue is a sensitive information disclosure where authentication credentials can be intercepted because cookies are transmitted in cleartext, enabling potential MITM attackers to capture stored credentials. The sources consistentl...
PT-2026-1451
iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middl...
QiHang Media Web Digital Signage 安全漏洞
QiHang Media Web Digital Signage is a digital signage management software from the Chinese company QiHang. A security vulnerability exists in QiHang Media Web Digital Signage version 3.0.9, which stems from the presence of a sensitive information disclosure vulnerability that could lead to the...
CVE-2025-67159
Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext...
PT-2026-27667
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race occurs in the network subsystem when skmsg or other layers modify the sk data ready and sk write space pointers while other CPUs read them concurrently. Recommendations At th...
PT-2026-8117
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a data race condition within the ndisc router discovery function. The syzbot tool identified that this function could read and write to in6 dev-ra mtu without...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992846)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992846 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix locking in rxrpc's sendmsg Fix three bugs in the rxrpc's sendmsg implementation: 1...
EUVD-2022-55919
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...
CVE-2022-50877
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...
UBUNTU-CVE-2022-50877
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...
CVE-2022-50877
CVE-2022-50877 concerns the Linux kernel, specifically the Broadcom bcm4908_enet driver. The issue stems from queuing packets without guarantees of transmission, leading to a race and NULL dereference where bcm4908_enet_start_xmit() could access an skb after it has been freed in bcm4908_enet_poll...
CVE-2022-50877 net: broadcom: bcm4908_enet: update TX stats after actual transmission
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...
CVE-2022-50877 net: broadcom: bcm4908_enet: update TX stats after actual transmission
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...
CVE-2022-50838 net: stream: purge sk_error_queue in sk_stream_kill_queues()
In the Linux kernel, the following vulnerability has been resolved: net: stream: purge skerrorqueue in skstreamkillqueues Changheon Lee reported TCP socket leaks, with a nice repro. It seems we leak TCP sockets with the following sequence: 1 SOFTIMESTAMPINGTXACK is enabled on the socket. Each ACK...
CVE-2022-50816
CVE-2022-50816 affects the Linux kernel IPv6 tunneling MTU handling. Root cause: a layer could set dev->mtu to an underflowed value due to insufficient sanitization when updating MTU for ip6_gre/ip6_tnl/ipip6 tunnels. Impact described in the sources includes potential invalid skb handling and ...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992273)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992273 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: handle the error returned from sctpauthasocinitactivekey When it returns an error from...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the tunneling device MTU value not being integrity-checked, which could result in an underflow value...
PT-2025-54113
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908 enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and...
