CVE-2025-36034 IBM InfoSphere DataStage Flow Designer information disclosure

IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques...

Lenze PLC Designer V4 安全漏洞

Lenze PLC Designer V4 is a programmable logic controller programming software from Lenze USA. A security vulnerability exists in Lenze PLC Designer V4 that stems from a password being displayed in clear text, which could lead to a low-privilege attacker gaining access to the password...

Sapido多款产品 安全漏洞

Sapido BR270n and others are products of Sapido Inc.Sapido BR270n is a wireless router.Sapido BR071n is a router.Sapido BR261c is a router. A security vulnerability exists in several Sapido products that stems from the disclosure of sensitive information, which could lead to an unauthenticated,...

SUSE CVE-2022-49948

In the Linux kernel, the following vulnerability has been resolved: vt: Clear selection before changing the font When changing the console font with ioctlKDFONTOP the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus...

SUSE CVE-2022-49954

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - wake up after clearing IFORCEXMITRUNNING flag syzbot is reporting hung task at inputunregisterdevice 1, for iforceclose waiting at waiteventinterruptible with dev-mutex held is blocking inputdisconnectdevice from...

DEBIAN-CVE-2022-50140

In the Linux kernel, the following vulnerability has been resolved: memstick/msblock: Fix a memory leak 'erasedblocksbitmap' is never freed. As it is allocated at the same time as 'usedblocksbitmap', it is likely that it should be freed also at the same time. Add the corresponding bitmapfree in...

DEBIAN-CVE-2022-49954

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - wake up after clearing IFORCEXMITRUNNING flag syzbot is reporting hung task at inputunregisterdevice 1, for iforceclose waiting at waiteventinterruptible with dev-mutex held is blocking inputdisconnectdevice from...

UBUNTU-CVE-2022-50140

In the Linux kernel, the following vulnerability has been resolved: memstick/msblock: Fix a memory leak 'erasedblocksbitmap' is never freed. As it is allocated at the same time as 'usedblocksbitmap', it is likely that it should be freed also at the same time. Add the corresponding bitmapfree in...

DEBIAN-CVE-2025-38078

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries to clear the buffer with the silence data at initialization or reconfiguration of a stream with the explicit call of sndpcmformatsetsilence with...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from msbdataclear not freeing the erase block bitmap, which could lead to a memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unverified block range in the ext4mbclearbb function...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe: The local fence was used in the error path of xemigrateclear. The purpose of the error path in xemigrateclear is to wait for the locally generated fence before returning. The code is waiting for m-fence, which could be th...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: The return value of init in amdgputtmclearbuffer. Otherwise, an uninitialized value may be returned if amdgpurescleared returns true for all regions. Possibly related to:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: rapidio: Fix an API misuse when rioaddnet fails. rioaddnet calls deviceregister, and it fails when deviceregister does. Therefore, putdevice should be used instead of kfree. Also, add "mport-net = NULL;" to avoid a...

Weak Password Requirements

Overview Affected versions of this package are vulnerable to Weak Password Requirements due to support of clear-text passwords. An attacker can brute-force a shorter password to get access to the system. Note: OpenC3 supports authentication using an authentication token, users are advised to use ...

PT-2025-37202

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel where inode pages are not truncated when the hard link number is zero, specifically within the jfs filesystem. This occurs when the fileset value of t...

SICK Field Analytics和SICK Media Server 安全漏洞

SICK Field Analytics and SICK Media Server are both products of the German company SICK.SICK Field Analytics is software for evaluating manufacturing data.SICK Media Server is a media server. A security vulnerability exists in SICK Field Analytics and SICK Media Server that stems from support for...

PT-2025-49372

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.14 through 6.18-rc5 Description A use-after-free UAF issue exists in the proc readdir de function within the Linux kernel. The problem occurs because rb erase is used to remove a proc directory entry pde from the...

DELL ThinOS Information Disclosure Vulnerability

DELL ThinOS is a thin client operating system from Dell designed for virtual workspaces, providing a highly secure and efficient virtual desktop experience. DELL ThinOS suffers from an information disclosure vulnerability that originates from storing sensitive information in clear text, which can...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open CVE-2024-53173 In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvmgetvcpu...