Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an unaligned start address when passing a page to the DSP, which could lead to memory corruption...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000287 advisory. In the Linux kernel before 4.20.12, net/ipv4/netfilter/nfnatsnmpbasicmain.c in the SNMP NAT module has insufficient ASN.1 length checks aka an array index error,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000244)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000244 advisory. In the Linux kernel before 4.20.14, expanddownwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NU...

Efacec QC 安全漏洞

EFACEC Efacec QC is a series of electric vehicle chargers from EFACEC Portugal. A security vulnerability exists in the EFACEC QC 60/90/120, which stems from the fact that sending a large number of ARP requests may result in a denial of service to the charger board controlling the EV interface...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000213 advisory. The Linux kernel 4.x starting from 4.1 and 5.x before 5.0.8 allows Information Exposure partial kernel address disclosure, leading to a KASLR bypass. Specifically, i...

openSUSE 15: libpcap-devel / libpcap-devel-32bit / libpcap-devel-static / etc (SUSE-SU-2026:0036-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0036-1 advisory. - CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765. Tenable has...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000217)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000217 advisory. A heap address information leak while using L2CAPGETCONFOPT was discovered in the Linux kernel before 5.1-rc1. Tenable has extracted the preceding description block...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000391 advisory. arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's...

PT-2026-1604

Name of the Vulnerable Software and Affected Versions AA Block Country plugin for WordPress versions up to and including 1.0.1 Description The AA Block Country plugin for WordPress is susceptible to IP Address Spoofing. The plugin relies on user-provided headers, specifically the HTTP X FORWARDED...

PT-2026-1664

Name of the Vulnerable Software and Affected Versions EFACEC EV chargers affected versions not specified Description A large number of ARP requests can cause a denial of service on a control board within the EV charger, impacting the EV interfaces. The affected board's proper operation is essenti...

CVE-2025-47388 Buffer Copy without Checking Size of Input in DSP Service

Memory corruption while passing pages to DSP with an unaligned starting address...

CVE-2025-47388 Buffer Copy without Checking Size of Input in DSP Service

Memory corruption while passing pages to DSP with an unaligned starting address...

CVE-2025-47388

CVE-2025-47388 : Qualcomm chipsets memory corruption occurs when passing pages to the DSP with an unaligned starting address, as described in multiple feeds. The vulnerability affects the DSP service path and could enable a local attacker to corrupt memory, with high impact on confidentiality, in...

CVE-2026-0597

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retailer/editprofile.php. This manipulation of the argument txtRetailerAddress causes sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-13964

creationtimestamp| type| source ---|---|--- 2026-01-06 12:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqyfahjwi2c...

SUSE-SU-2026:0036-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765...

Security update for libpcap

This update for libpcap fixes the following issues: CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

CVE-2025-15450

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected by this vulnerability is the function findOrderHosNum of the file /ssmpro/orderHos/. Such manipulation of the argument hospitalAddress/hospitalName leads to sql injection. The attack can ...

CVE-2025-52516

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service...

CVE-2025-65328

Mega-Fence webgate-lib. 25.1.914 and prior trusts the first value of the X-Forwarded-For XFF header as the client IP without validating a trusted proxy chain. An attacker can supply an arbitrary XFF value in a remote request to spoof the client IP, which is then propagated to security-relevant...