Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2025-1091)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities

Summary The product includes multiple vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2024-37891 DESCRIPTION: urllib3 could allow a remote authenticated attacker to...

CVE-2025-0960

AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device...

CVE-2025-0960 AutomationDirect C-more EA9 HMI Classic Buffer Overflow

AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device...

CVE-2025-0960

The CVE-2025-0960 entry affects AutomationDirect C-more EA9 HMI. A function contains bounds checks that can be skipped, enabling an attacker to cause a denial-of-service or potentially achieve remote code execution on the affected device. The issue is network-exploitable with high impact to confi...

grpc: Denial of Service through Data corruption in gRPC-C++

A flaw was found in gRPC. In certain configurations, the data sent by the application may be corrupted before transmission over the network, leaving the recipient with an incorrect set of bytes, which will cause RPC requests to fail. This issue may lead to a denial of service...

Moderate: Red Hat Security Advisory: Satellite 6.16.2 Async Update

A new release is now available for Red Hat Satellite 6.16 for RHEL 8 and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CISA Releases Nine Industrial Control Systems Advisories

CISA released nine Industrial Control Systems ICS advisories on February 4, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-035-01 Western Telematic Inc NPS Series, DSM Series, CPM Series ICSA-25-035-02 Rockwe...

CVE-2025-0960: Buffer Copy without Checking Size of Input

AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device...

AutomationDirect C-more EA9 HMI 安全漏洞

AutomationDirect C-MORE EA9 HMI is a touchscreen from AutomationDirect, Inc. A security vulnerability exists in the AutomationDirect C-more EA9 HMI that originates from a boundary check skip resulting in a buffer overflow...

PT-2025-4113

Name of the Vulnerable Software and Affected Versions AutomationDirect C-more EA9 HMI affected versions not specified Description The issue concerns a function with bounds checks that can be skipped, potentially allowing an attacker to abuse the function and cause a denial-of-service condition or...

The vulnerability of the `assert` function in the GNU C Library is related to incorrect calculations of the size of the buffer allocated. This vulnerability allows an attacker to compromise the accessibility of the protected information.

The vulnerability of the assert function in the GNU C Library is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

Moderate: mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: buffer overflow in...

Security update for patch

This update for patch fixes the following issues: CVE-2019-20633: Fix double-free/OOB read in pch.c bsc1167721 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for...

PT-2025-5668 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash involved the ndpi serialize string string and ndpi dpi2json functions, and ...

CVE-2024-53319

A heap buffer overflow in the XML Text Escaping component of Qualisys C++ SDK commit a32a21a allows attackers to cause Denial of Service DoS via escaping special XML characters...

CVE-2020-12762 affecting package json-c for versions less than 0.15-2

CVE-2020-12762 affecting package json-c for versions less than 0.15-2. A patched version of the package is available...

PT-2025-2957 · Qualisys · Qualisys C++ Sdk

Name of the Vulnerable Software and Affected Versions: Qualisys C++ SDK version a32a21a Description: The issue concerns multiple stack buffer overflows that can occur through the GetCurrentFrame, SaveCapture, and LoadProject functions. This can potentially lead to exploitation, although specific...

CVE-2024-53320

Qualisys C++ SDK commit a32a21a was discovered to contain multiple stack buffer overflows via the GetCurrentFrame, SaveCapture, and LoadProject functions...

CVE-2024-53319

A heap buffer overflow exists in the XML Text Escaping component of the Qualisys C++ SDK (specifically commit a32a21a ). This vulnerability allows an attacker to trigger a Denial of Service (DoS) by escaping special XML characters. While no specific exploit links are provided, the impact is chara...