2241 matches found
CVE-2025-10693 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-10693 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
SiLabs Silicon Labs Z-Wave SDK 安全漏洞
The SiLabs Silicon Labs Z-Wave SDK is a development kit from SiLabs USA. A security vulnerability exists in SiLabs Silicon Labs Z-Wave SDK version v2025.6.0 and v2025.6.1, which stems from a device joining the network in a non-secure manner when SmartStart Inclusion fails...
PT-2025-44667
Name of the Vulnerable Software and Affected Versions Silicon Labs Z-Wave PIR Sensor Reference design versions 2025.6.0 through 2025.6.1 Description A failure during SmartStart Inclusion when onboarding a Z-Wave PIR sensor can result in the sensor joining the network as a non-secure device. This...
PT-2025-43794
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jamel.Z Tooltipy bluet-keywords-tooltip-generator allows Stored XSS.This issue affects Tooltipy: from n/a through = 5.5.9...
PT-2025-44990
Name of the Vulnerable Software and Affected Versions AMD processors affected versions not specified Description A flaw exists in the RDSEED instruction used for hardware-level random number generation on Zen 5 CPUs. This issue can cause the 16-bit and 32-bit versions of RDSEED to produce...
CVE-2023-53702
CVE-2023-53702 concerns the s390 ChaCha20 vector-accelerator path in the Linux kernel. The ChaCha20 library interface added in commit 349d03ffd5f6 allows using assembler vector instructions when available, but a MACHINE_HAS_VX check was not added, causing a crash if vector facilities are absent (...
CVE-2025-62376
pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...
CVE-2025-62376 pwn.college DOJO vulnerable to improper authentication in workspace endpoint allowing unauthorized Windows VM access
pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The...
s390/uv: Don't call folio_wait_writeback() without a folio reference
...
iommu/s390: Make attach succeed when the device was surprise removed
...
EUVD-2025-33325
In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...
CVE-2025-36156
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...
CVE-2025-36156
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...
EUVD-2025-32736
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...
CVE-2025-36156 IBM InfoSphere Data Replication VSAM for z/OS Remote Source code execution
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...
CVE-2025-36156
IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow caused by improper bounds checking in CECSUB/CECRM handling. A local user with access to container files could overflow the buffer and execute arbitrary code. Affected component: VSAM R...