PT-2025-13563 · Xfig +4 · Xfig +4

Name of the Vulnerable Software and Affected Versions: xfig fig2dev version 3.2.9a Description: The issue is related to a segmentation fault in the fig2dev component of xfig, which can be triggered by manipulating local input via the put patternarc function. This can lead to a null pointer...

Fedora 41 : nodejs-nodemon (2025-0951177024)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0951177024 advisory. Added patch for CVE-2024-4068 rhbz2280624 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to compromise privacy, integrity, and accessibility of data...

The vulnerability of the SMB2_ioctl_init() function in the fs/cifs/smb2pdu.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SMB2ioctlinit function in the fs/cifs/smb2pdu.c module of the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-2820

An authenticated attacker can compromise the availability of the device via the network...

CVE-2025-2820 Denial of Service

An authenticated attacker can compromise the availability of the device via the network...

CVE-2025-2820

CVE-2025-2820 affects Bizerba GLx and CWX terminals (as cited by multiple sources). An authenticated attacker can disrupt availability of the device over the network (CVSS: Network, Privileges Required Low, User Interaction None, Impact: Availability High). The connected Red Hat, NVD, CVE List, a...

CVE-2025-2820 Denial of Service

An authenticated attacker can compromise the availability of the device via the network...

Security Bulletin: IBM Security Verify Directory products have multiple security vulnerabilities (CVE-2022-33164, CVE-2022-33168, CVE-2022-33161, CVE-2022-32755)

Summary Several vulnerabilities have been addressed in IBM Security Directory Server, IBM Security Directory Suite, and IBM Security Verify Directory products. Vulnerability Details CVEID:CVE-2022-33164 DESCRIPTION: IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse...

Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities

Summary IBM Cloud Transformation Advisor has addressed multiple security vulnerabilities including those in Node.js, IBM WebSphere Application Server Liberty and various other libraries. Vulnerability Details CVEID:CVE-2022-24839 DESCRIPTION: Sparkle Motion Nokogiri is vulnerable to a denial of...

Bizerba GLx和Bizerba CWX 安全漏洞

Bizerba GLx and Bizerba CWX are both series of operating terminals from Bizerba. A security vulnerability exists in the Bizerba GLx and Bizerba CWX, which stems from a vulnerability that could lead to a breach of device availability...

PT-2025-12943 · Bizerba Se & Co. Kg · Product Family Glx/Cwx

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated attacker can compromise the availability of the device via the network. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

The vulnerability of the SmartFabric OS10 network operating system, related to the use of the default password, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SmartFabric OS10 network operating system is related to the use of a default password. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...

CVE-2025-1445

CVE-2025-1445 affects Hitachi Energy RTU500 series, specifically the IEC 61850 client/server stack on CMU devices configured with TLS. The issue is a potential availability problem if renegotiation of an active IEC 61850 TLS connection occurs in certain timing scenarios. Precondition: TLS is enab...

CVE-2025-1445

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...

Hitachi Energy RTU500 安全漏洞

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Energy RTU500 that stems from a renegotiation of an open IEC61850 TLS connection in a specific time scenario could affect availability...

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...