Medium: edk2

Issue Overview: EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability. CVE-2024-38797...

Photon OS 4.0: Apache PHSA-2025-4.0-0777

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0777. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens SIMATIC IPC RS-828A

SUMMARY SIMATIC IPC RS-828A is affected by an authentication bypass vulnerability in the Redfish interface of its Baseboard Management Controller BMC that could allow an attacker to gain unauthorized access and compromise confidentiality, integrity and availability of the BMC and thus the entire...

OPENSUSE-SU-2025:15080-1 java-21-openj9-21.0.7.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15077-1 java-11-openj9-11.0.27.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.27.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15081-1 libxmp-devel-4.6.3-1.1 on GA media

These are all security issues fixed in the libxmp-devel-4.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

Mageia: Security Advisory (MGASA-2025-0152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-22221

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12 Description A vulnerability in the Linux kernel has been resolved. The issue occurs in the memblock double array function when increasing the array size and the slab is not yet available. A call to memblock...

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ieee802154hdr_peek_addrs() function in the Linux operating system allows a hacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee802154hdrpeekaddrs function in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of the org.xwiki.platform:xwiki-platform-security-requiredrights-default component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the org.xwiki.platform:xwiki-platform-security-requiredrights-default component of the XWiki Platform relates to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...

OPENSUSE-SU-2025:15073-1 chromedriver-136.0.7103.92-1.1 on GA media

These are all security issues fixed in the chromedriver-136.0.7103.92-1.1 package on the GA media of openSUSE Tumbleweed...

Vulnerability of the mtk_iommu_hw_init() function in the drivers/iommu/mtk_iommu.c module – This driver for Linux’s IOMMU kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkiommuhwinit function in the drivers/iommu/mtkiommu.c module – Linux’s IOMMU kernel support driver is vulnerable due to the use of the NULL pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially...

The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the fact that the operation values are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Apache ActiveMQ 6.1.6 - Denial of Service (DOS)

Exploit Title: Apache ActiveMQ 6.1.6 - Denial of Service DOS Date: 2025-05-9 Exploit Author: Abdualhadi khalifa https://x.com/absholi7ly/ Github: https://github.com/absholi7ly/CVE-2025-27533-Exploit-for-Apache-ActiveMQ CVE: CVE-2025-27533 import socket import struct import time import datetime...

CVE-2025-46592

Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-46593

Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-46586

Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-46585

Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability...