Security Bulletin: IBM® Db2® is vulnerable to a denial of service when connecting to a z/OS database. (CVE-2025-1000)

Summary IBM® Db2® is vulnerable to a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting. Vulnerability Details CVEID:CVE-2025-1000 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated use...

CVE-2025-4040

Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Privilege Escalation. This issue affects Automatic Station Monitoring System: before 5.0.6.51...

CVE-2025-4040

Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Privilege Escalation. This issue affects Automatic Station Monitoring System: before 5.0.6.51...

CVE-2025-4040 IDOR in Turpak's Automatic Station Monitoring System

Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Privilege Escalation. This issue affects Automatic Station Monitoring System: before 5.0.6.51...

CVE-2025-4040

CVE-2025-4040 affects Turpak Automatic Station Monitoring System (versions prior to 5.0.6.51). The issue is an Authorization Bypass Through a User-Controlled Key, enabling Privilege Escalation. Multiple sources (Red Hat, CVE ecosystem listings, and PT Security) corroborate the vulnerability and s...

CVE-2025-4040

Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Privilege Escalation. This issue affects Automatic Station Monitoring System: before 5.0.6.51...

SVAgent: AI Agent for Hardware Security Verification Assertion

Verification using SystemVerilog assertions SVA is one of the most popular methods for detecting circuit design vulnerabilities. However, with the globalization of integrated circuit design and the continuous upgrading of security requirements, the SVA development model has exposed major...

Turpak Automatic Station Monitoring System 安全漏洞

Turpak Automatic Station Monitoring System is an automated gas station monitoring system from Turpak. A security vulnerability exists in Turpak Automatic Station Monitoring System versions prior to 5.0.6.51, which originates from bypassing authorization via a user control key and may result in...

PT-2025-30265

Name of the Vulnerable Software and Affected Versions Turpak Automatic Station Monitoring System versions prior to 5.0.6.51 Description An authorization bypass exists in Turpak Automatic Station Monitoring System due to a user-controlled key, allowing for privilege escalation. Recommendations...

Fedora 43 : containerd (2025-bacdac27c8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bacdac27c8 advisory. Automatic update for containerd-2.1.1-1.fc43. Changelog Tue May 20 2025 Bradley G Smith - 2.1.1-1 - Update package to release v2.1.1 - Resolves:...

Fedora 43 : docker-buildx (2025-bf271e904b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-bf271e904b advisory. Automatic update for docker-buildx-0.24.0-1.fc43. Changelog Wed May 21 2025 Bradley G Smith - 0.24.0-1 - Update package to release v0.24.0 - Resolve:...

Fedora 43 : golang-github-prometheus-prom2json (2025-18547fda0a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-18547fda0a advisory. Automatic update for golang-github-prometheus-prom2json-1.4.2-1.fc43. Changelog Tue Jul 15 2025 Mikel Olasagasti Uranga - 1.4.2-1 - Update to 1.4.2 and adopt...

Fedora 43 : asnmap (2025-6ef99deed4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6ef99deed4 advisory. Automatic update for asnmap-1.1.1-1.fc43. Changelog Mon Jul 14 2025 Mikel Olasagasti Uranga - 1.1.1-1 - Update to 1.1.1 and adopt Go Vendor Tools -...

Fedora 43 : dnsx (2025-4af86bb0f8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4af86bb0f8 advisory. Automatic update for dnsx-1.2.2-1.fc43. Changelog Sun Jul 13 2025 Mikel Olasagasti Uranga - 1.2.2-1 - Update to 1.2.2 and adopt Go Vendor Tools -...

Fedora 43 : lw-cli (2025-40bd0d18e6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-40bd0d18e6 advisory. Automatic update for lw-cli-0.7.0-3.fc43. Changelog Sat Jul 12 2025 Mikel Olasagasti Uranga - 0.7.0-3 - Adopt Go Vendor Tools - Closes rhbz2340803 rhbz235231...

Unspecified Vulnerability in Endress+Hauser MEAC300-FNADE4 (CNVD-2025-16343)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4 that originates from automatically logging in an EPC2 Windows user at startup without entering a password. An...

Fedora 43 : python-asteval (2025-99d252d8fc)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-99d252d8fc advisory. Automatic update for python-asteval-1.0.6-1.fc43. Changelog Wed Jul 9 2025 Fabian Affolter - 1.0.6-1 - Update to latest upstream release closes rhbz2338907 -...

Description of the security update for SharePoint Server 2019 Language Pack: July 8, 2025 (KB5002739)

Description of the security update for SharePoint Server 2019 Language Pack: July 8, 2025 KB5002739 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...

Fedora 43 : minidlna (2025-7dbb8de594)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7dbb8de594 advisory. Automatic update for minidlna-1.3.3-13.fc43. Changelog Mon Jul 7 2025 Dominik Mierzejewski - 1.3.3-13 - use systemctl try-restart in postrotate script resolv...

CVE-2025-27461

During startup, the device automatically logs in the EPC2 Windows user without requesting a password...