CVE-2025-53597

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and...

CVE-2025-52871

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later...

CVE-2025-53597 License Center

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and...

CVE-2025-53597

CVE-2025-53597 describes a buffer overflow in QNAP License Center. The vulnerability affects License Center versions prior to 2.0.36, where an attacker with administrative privileges could trigger memory corruption or cause processes to crash. The fixed version is License Center 2.0.36 and later....

CVE-2025-53597 License Center

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and...

CVE-2025-52871

CVE-2025-52871 affects QNAP License Center. The vulnerability is an out-of-bounds read in License Center prior to version 2.0.36, exploitable by a remote attacker who has a user account to obtain secret data. Patches exist in License Center 2.0.36 and later. Publicly reported details across multi...

CVE-2025-52871 License Center

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later...

QNAP Systems License Center 缓冲区错误漏洞

QNAP Systems License Center is a license management center of Taiwan, China-based QNAP Systems. A buffer error vulnerability exists in QNAP Systems License Center versions prior to 2.0.36, which originates from an out-of-bounds read and could lead to the acquisition of secret data...

PT-2026-1095

Name of the Vulnerable Software and Affected Versions License Center versions prior to 2.0.36 Description A buffer overflow issue exists in License Center. Successful exploitation could allow a remote attacker with administrator privileges to modify memory or cause processes to crash...

QNAP Systems License Center 安全漏洞

QNAP Systems License Center is a license management center from QNAP Systems, a Taiwan, China-based company. A security vulnerability exists in QNAP Systems License Center versions prior to 2.0.36, which stems from a buffer overflow that could result in modification of memory or process crash...

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator resulting in denial of service or (with very low probability) authentication bypass or code execution.

...

CVE-2024-42934 affecting package OpenIPMI for versions less than 2.0.36-1

CVE-2024-42934 affecting package OpenIPMI for versions less than 2.0.36-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-43257

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Nouthemes Leopard - WordPress offload media.This issue affects Leopard - WordPress offload media: from n/a through 2.0.36...

WordPress theme Leopard 信息泄露漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. An information disclosure vulnerability exists in WordPress theme Leopard version 2.0.36 and earlier versions...

PT-2024-30210 · Openipmi +5 · Openipmi +5

Name of the Vulnerable Software and Affected Versions: OpenIPMI versions prior to 2.0.36 Description: The issue is related to an out-of-bounds array access in the ipmi sim simulator for authentication type, which can result in denial of service or, with very low probability, authentication bypass...

WordPress plugin Leopard - WordPress offload media 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress Leopard plugin <= 2.0.36 - Subscriber+ Sensitive Data Exposure vulnerability

Subscriber+ Sensitive Data Exposure vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Leopard - WordPress offload media versions = 2.0.36...

Debian DLA-1248-1 : libgd2 security update

It was discovered that there was a denial of service attack in the libgd2 image library. A corrupt file could have exploited a signedness confusion leading to an infinite loop. For Debian 7 'Wheezy', this issue has been fixed in libgd2 version 2.0.36rc1dfsg-6.1+deb7u11. We recommend that you...

CVE-1999-0426

CVE-1999-0426 affects Linux prior to 2.0.36 due to default permissions of the /dev/kmem character device, enabling IP spoofing. Root cause: /dev/kmem permissions allowed spoofing without additional privileges. Impact: network-based spoofing risk on affected systems. Mitigation: upgrade to Linux 2...

PT-1999-1110 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.0.36 Description: The issue concerns the default permissions of the /dev/kmem file in Linux, which allows IP spoofing. Recommendations: For Linux versions prior to 2.0.36, consider updating to version 2.0.36 or later...