CVE-2022-49566 crypto: qat - fix memory leak in RSA

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix memory leak in RSA When an RSA key represented in form 2 as defined in PKCS 1 V2.1 is used, some components of the private key persist even after the TFM is released. Replace the explicit calls to free the buffe...

CVE-2022-49183 net/sched: act_ct: fix ref leak when switching zones

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix ref leak when switching zones When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcfctskbnfctcached returns fals...

PT-2025-20536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically between rcu tasks trace and event mutex. This occurs due to a lock dependency when free event grabs event mutex and...

PT-2025-27687

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to TIF IO BITMAP inconsistencies. The issue occurs when io bitmap exit invokes task update io bitmap, which can lead to a...

Beckman Coulter MET ONE 3400+ instruments running software 安全漏洞

Beckman Coulter MET ONE 3400+ instruments running software is a software for MET ONE 3400 + instruments running from Beckman Coulter, USA. SOP programs can be customized to automate cleanroom monitoring. Beckman Coulter MET ONE 3400+ instruments running software A security vulnerability exists in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible crash when the mt76 driver receives CTS packets in monitor mode...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.1 security and extras update

Red Hat OpenShift Container Platform release 4.18.1 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...

PT-2025-16723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the handling of multiple calls to vhost scsi set endpoint in the Linux kernel. This can lead to several problems, including a use-after-free bug when no tpgs are...

PT-2025-6545 · WordPress · Speedsize Image & Video Ai-Optimizer

Name of the Vulnerable Software and Affected Versions: SpeedSize Image & Video AI-Optimizer plugin for WordPress versions up to, and including, 1.5.1 Description: The issue is due to missing or incorrect nonce validation on the speedsize clear css cache action function, making it possible for...

WordPress SpeedSize Image & Video AI-Optimizer plugin <= 1.5.1 - Cross-Site Request Forgery to Clear Cache vulnerability

Cross-Site Request Forgery to Clear Cache vulnerability discovered by Dhabaleshwar Das in WordPress Plugin SpeedSize Image & Video AI-Optimizer versions = 1.5.1...

IBM Security Verify Access Information Disclosure Vulnerability (CNVD-2025-06210)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

CVE-2024-10404

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative privileges could retrieve sensitive...

CVE-2024-10404

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative privileges could retrieve sensitive...

CVE-2024-10404

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative privileges could retrieve sensitive...

CVE-2024-10404 Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative privileges could retrieve sensitive...

CVE-2024-10404

CVE-2024-10404 affects Brocade SANnav (before 2.3.1b). It discloses that CalInvocationHandler logs sensitive information in clear text, allowing an authenticated, local attacker with admin privileges to view sensitive data (including passwords such as AuthSecret and PrivSecret) after a supportsav...

CVE-2024-10404 Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative privileges could retrieve sensitive...

CVE-2023-3489

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS...

CVE-2025-0556 Telerik Report Server Clear Text Transmission of Agent Commands

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

How to Steer AI Adoption: A CISO Guide

CISOs are finding themselves more involved in AI teams, often leading the cross-functional effort and AI strategy. But there aren't many resources to guide them on what their role should look like or what they should bring to these meetings. We've pulled together a framework for security leaders ...