CVE-2025-68957

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68957

CVE-2025-68957 is a multi-thread race condition in Huawei HarmonyOS’s Card Framework module. Affected component: Card Framework; affected product/version: HarmonyOS (notably v6.0.0 per CNNVD). Impact: availability can be affected if exploited. Exploitability indicators from sources include local ...

CVE-2025-68957

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68956

CVE-2025-68956 corresponds to a multi-thread race condition in the Card Framework module of Huawei HarmonyOS. Multiple connected sources (Red Hat, CIRCL, CNNVD, CVE databases, PT-Security) describe a vulnerability that could affect system availability. The Huawei/NVD entries indicate a local atta...

CVE-2025-68956

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68955

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68955

CVE-2025-68955 relates to a multi-thread race condition in the Card Framework module. Connected sources reference Huawei HarmonyOS (v6.0.0) as affected, describing a contention condition that could affect usability/availability. The exact vulnerable components and fixed versions are not consisten...

CVE-2026-0506

Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines FORMs in the ABAP system. Successful exploitation could allow the attacker to write or modify data accessible via FORMs...

CVE-2026-0492

SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system�s confidentiality, integrity, and availability...

CVE-2026-0504

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...

CVE-2026-0510

The User Management Engine UME in NetWeaver Application Server for Java NW AS Java utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000568)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000568 advisory. Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors. Tenable has extracted the...

MiracleLinux 4 : mysql-5.1.61-1.1.0.1.AXS4 (AXSA:2012-195:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-195:01 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...

MiracleLinux 4 : mysql-5.1.66-1.0.1.AXS4 (AXSA:2012-1036:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-1036:03 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...

PT-2026-2560

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68955 Description A multi-thread race condition exists in the card framework module. Successful exploitation could impact availability. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-68957: Concurrent Execution using Shared Resource with Improper Synchronization

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

OPENSUSE-SU-2026:10050-1 rke2-1.34-1.34.3+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.34-1.34.3+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-2569

Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68956: Concurrent Execution using Shared Resource with Improper Synchronization

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-2561

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68956 Description A multi-thread race condition exists within the card framework module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information about ...