SUSE CVE-2011-0868

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D...

SUSE CVE-2015-0413

Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability...

SUSE CVE-2021-2418

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

SUSE CVE-2021-2422

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

SUSE CVE-2021-2437

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2022-48125

creationtimestamp| type| source ---|---|--- 2023-01-20 18:27:32+00:00| seen| https://t.me/cibsecurity/56754 2025-04-03 15:35:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10254...

PT-2022-7169 · Ericsson · Ericsson Evolved Packet Gateway

Name of the Vulnerable Software and Affected Versions: Ericsson Evolved Packet Gateway EPG versions 2.x before 2.16 Ericsson Evolved Packet Gateway EPG versions 3.x before 3.25 Description: The issue is related to the command-line interface CLI of the Ericsson Evolved Packet Gateway EPG and is...

Vulnerability fixed in Erlang OTP

Erlang developers have fixed a vulnerability in Erlang OTP. A malicious party could exploit the vulnerability to gain access to sensitive data, when using Erlang SSL in combination with client authentication. Erlang has released updates to fix the vulnerability in OTP 25.1; for more information,...

SUSE-SU-2022:4005-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2022-37454: Fixed buffer overflow in hashupdate on long parameter bug81738 bsc1204577. - CVE-2022-31630: Fixed OOB read due to insufficient input validation in imageloadfont bug81739 bsc1204979. - version update to 8.0.25 27 Oct 2022 Session:...

CVE-2022-2265

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25...

CVE-2022-20128

creationtimestamp| type| source ---|---|--- 2022-09-11 20:20:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6778 2022-09-13 14:05:05+00:00| published-proof-of-concept| https://t.me/CNArsenal/259 2023-03-28 08:55:29+00:00| published-proof-of-concept|...

CVE-2022-1950

creationtimestamp| type| source ---|---|--- 2022-08-01 16:16:50+00:00| seen| https://t.me/cibsecurity/47313 2025-04-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-04-23 2025-05-20 08:12:15+00:00| confirmed|...

CVE-2022-32409

creationtimestamp| type| source ---|---|--- 2022-07-15 02:33:09+00:00| seen| https://t.me/cibsecurity/46287 2025-06-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-08 2025-06-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-09...

PT-2022-6996 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue is related to an out-of-bounds read in the Exim smtp service, which can allow network-adjacent attackers to disclose sensitive information on affected installations of Exim. The...

CVE-2022-24700

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of service daemon crash via a malicious AX.25 packet over the air. NOTE: This vulnerability only affects products that are no longer supported by...

WinAPRS 安全漏洞

WinAPRS is a multifaceted system for packet radios in Hams that allows monitoring of real-time geographic information such as vehicle location, weather status, radio direction finding, and more. It involves maps, GPS tracking, packet radios and more. A security vulnerability exists in WinAPRS...

USN-5416-1 linux-oem-5.14 vulnerabilities

Qiuhao Li, Gaoning Pan and Yongkang Jia discovered that the KVM implementation in the Linux kernel did not properly perform guest page table updates in some situations. An attacker in a guest vm could possibly use this to crash the host OS. CVE-2022-1158 It was discovered that the implementation ...

UBUNTU-CVE-2022-1516

A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash the system...

Asterisk 代码问题漏洞

Asterisk is software for a PBX system that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 19.x and prior versions of STIR/SHAKEN contain a security vulnerability that originates from the ability to send arbitrary requests e.g., GET to interfaces such as...

UBUNTU-CVE-2022-1204

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system...