The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system allows a perpetrator to access confidential information.

The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

PT-2025-45483

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists due to improper handling of a malformed Connection Request. Specifically, when the interval is set to 1, which is an illegal value, and the chM is set to 0x7CFFFFFFFF, a crash is...

CVE-2022-50595 Advantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCE

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztpsearchvalue’ parameter to the ‘NetworkServlet’ endpoint. Successful...

CVE-2022-50595

Advantech iView prior to v5.7.04 build 6425 is affected. The SNMP management tool exposes a SQL injection in the ztp_search_value parameter of the NetworkServlet, enabling remote attackers to bypass authentication and achieve remote code execution with administrator privileges. Root cause cited a...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

BIT-CONSUL-2025-11374 Consul's KV endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...

RLSA-2025:19435 Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal CVE-2025-62230 xorg: xmayland: Value overflow in XkbSetCompatMap...

OSV-2025-879 Use-of-uninitialized-value in JS_DefineProperty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457858149 Crash type: Use-of-uninitialized-value Crash state: JSDefineProperty buildbacktrace JSCallInternal...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990432 advisory. In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in...

Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submitopacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execu...

GO-2025-4081 Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul

Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

CVE-2025-20730

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990046)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990046 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989718 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpolrebindpolicy mpolsetnodemaskmm/mempolicy.c does not set up...

CVE-2025-63334

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 is vulnerable to an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The root cause is a failure to sanitize user input provided in the opacityValue POST parameter before it is passed to a shell command. This all...

PT-2025-45161

Name of the Vulnerable Software and Affected Versions PocketVJ CP versions 3.9.1 Description The application does not properly sanitize user input in the opacityValue POST parameter before it is used in a shell command. This allows remote attackers to execute arbitrary commands with root privileg...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989729)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989729 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989981 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in...