18451 matches found
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46724)
drm/amdgpu: vulnerability in drm/amdgpu that involved an out-of-bounds read of dfv17channelnumber. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
EUVD-2025-197848
CWE-20 Improper Input Validation...
EUVD-2025-197852
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
Linux Program Check Common Heap Buffer Overflow DoS
The vulnerability of the programcheckcommon function in the arch/powerpc/kernel/exceptions-64s.S file of the Linux operating system’s kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...
Fedora: Security Advisory (FEDORA-2025-daa6238745)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2025-12765
pgAdmin = 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification...
Windows Common Log File System Driver Privilege Escalation
The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
PT-2025-46787
🟠 Parse Server, Information Disclosure, CVE-2023-43605 Medium https://t.co/5zLHiihOZO...
OpenSCAP Libraries 1.3.13
The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...
CVE-2025-13058
A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as...
CVE-2025-9227
Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor...
EUVD-2025-124939
In the Linux kernel, the following vulnerability has been resolved: nvdimm: ndtest: Return -ENOMEM if devmkcalloc fails in ndtestprobe devmkcalloc may fail. ndtestprobe allocates three DMA address arrays dcrdma, labeldma, dimmdma and later unconditionally uses them in ndtestnvdimminit, which can...
Security Bulletin: IBM QRadar SIEM is affected by improper storage of credentials in configuration files
Summary IBM QRadar SIEM is affected by improper storage of credentials in configuration files in source control. IBM has addressed the issue in the latest update. Vulnerability Details CVEID:CVE-2025-33119 DESCRIPTION: IBM QRadar SIEM stores user credentials in configuration files in source contr...
CVE-2025-40176
creationtimestamp| type| source ---|---|--- 2025-11-12 12:00:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gm3cwbw32n 2025-11-12 14:01:47+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsstockzu2 2026-04-02 17:00:00+00:00| seen|...
DEBIAN-CVE-2025-40162
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdwutils: avoid NULL deref when devmkasprintf fails devmkasprintf may return NULL on memory allocation failure, but the debug message prints cpus-dainame before checking it. Move the devdbg call after the NULL check to...
CVE-2025-40127
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...
EUVD-2025-117479
Malicious code in common-coffee-loon npm...
EUVD-2025-106033
Malicious code in commonfoxz3n npm...
CVE-2025-64432
KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...
