OpenSSH 10.0p1

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides a large suite of secure tunneling capabilities, several authentication methods, and...

HPESBNS04836 rev.1 - HPE NonStop OSM Service Connection Suite, Denial of Service vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OSM Service Connection Suite T0682 - L-series SPRs prior to T0682L02^BBV - All L-series versions of the product are affected. CVSS Scores: | CVE | CVSS Vector | Base Score | | -...

Hewlett Packard Enterprise NonStop OSM Service Connection Suite 安全漏洞

Hewlett Packard Enterprise NonStop OSM Service Connection Suite is an open systems management OSM interface for Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise NonStop OSM Service Connection Suite that originates from a potential local denial of servi...

CVE-2025-21429

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

CVE-2025-21428

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session...

Fortinet FortiWeb No certificate name verification for fgfm connection (FG-IR-24-046)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-24-046 advisory. - A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS...

CVE-2025-21428

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session...

CVE-2025-21430

CVE-2025-21430 is a Qualcomm WLAN (WLAN Host) vulnerability described as a transient Denial of Service during STA-to-AP connection and ADD TS request to establish a TSpec session. The CVSS 3.1 base score is 7.5 (Network, Low attack complexity, No privileges, No user interaction, Availability impa...

CVE-2025-21429 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

PT-2025-15205 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a Transient Denial of Service DOS that occurs when connecting a Station STA to an Access Point AP and initiating an ADD TS request from the AP to establish a TSpec...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when connecting an STA to an AP and initializing an ADD TS request...

Ubuntu 14.04 LTS : libdbd-mysql-perl vulnerabilities (USN-7417-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7417-1 advisory. It was discovered that libdbd-mysql-perl did not correctly handle certain SQL queries. An attacker could possibly use this issue to cause a denial of...

ConnMan 安全漏洞

ConnMan is an Aldebaran open source connection manager. A security vulnerability exists in ConnMan 1.44 and earlier versions, which stems from a memcpy length dependency on the RR RDLENGTH value...

CVE-2025-3268

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3267

A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

PT-2025-15042 · Unknown · Qinguoyi Tinywebserver

Name of the Vulnerable Software and Affected Versions: qinguoyi TinyWebServer version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /http/http conn.cpp. The manipulation of the name and password arguments leads to a stack-based...

An error occurs when specifying the license server by IP address in Citrix Studio

In Citrix Studio, select Licensing from the left-hand tree and click Change License Server, when entering IP address in the "Change License Server" window that appears, the message "Connected to a trusted server" is displayed. However, when returning to Studio, the error message "Cannot connect t...

CVE-2025-32049

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

MAL-2025-3084 Malicious code in daos.fun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6981bbd2419a973811f38b35a5dcf95ec496a17e132d0d95f86314cfb32cd914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-3083

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0...