CVE-2025-53513: Path Traversal: '../filedir'

The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on the controller to upload a charm. Uploading a malicious charm that exploits a Zip Slip vulnerability could allow an attacker to gain access to a machine running a unit through th...

CVE-2025-0928: Improper Authorization

In Juju versions prior to 3.6.8 and 2.9.52, any authenticated controller user was allowed to upload arbitrary agent binaries to any model or to the controller itself, without verifying model membership or requiring explicit permissions. This enabled the distribution of poisoned binaries to new or...

PHOENIX CONTACT CHARX SEC security vulnerabilities

PHOENIX CONTACT CHARX SEC is a series of AC charging controllers from PHOENIX CONTACT, Germany. A security vulnerability exists in the PHOENIX CONTACT CHARX SEC that originates from an unauthenticated neighboring attacker being able to configure a new OCPP backend due to the configuration interfa...

Itsourcecode Agri-Trading Online Shopping System has a injection vulnerability

itsourcecode Agri-Trading Online Shopping System is itsourcecode open source an online shopping system . Itsourcecode Agri-Trading Online Shopping System 1.0 and earlier versions have an injection vulnerability, the vulnerability stems from improper manipulation of the parameter supplier in the...

PT-2025-28313 · Unknown · Wlan Access Point Controller

Name of the Vulnerable Software and Affected Versions: WLAN Access Point Controller affected versions not specified Description: The issue is related to a possible out-of-bounds write in the WLAN Access Point Controller driver due to an incorrect bounds check. This could lead to remote code...

CVE-2025-7102

CVE-2025-7102 affects BoyunCMS up to 1.4.20, targeting the file application/update/controller/Server.php. The vulnerability stems from improper handling of the argument phone, enabling SQL injection that can be triggered remotely. The initial sources indicate exploitation has been disclosed publi...

CVE-2025-7102: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can be initiated remotely. The exploit has...

BoyunCMS security vulnerabilities

BoyunCMS is an enterprise content management system from China Boyun Boyun Company. A security vulnerability exists in BoyunCMS 1.4.20 and earlier versions, which originates from improper handling of the component curl in the file /application/pay/controller/Index.php, which may lead to server-si...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vgic-init.c, vgic-mmio-v3.c, and vgic.h components of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38178

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-38178

...

CVE-2025-38178

CVE-2025-38178 affects the Linux kernel EDAC/igen6 path. The root cause is a NULL pointer dereference when a memory controller is disabled by the BIOS but the driver still checks all controllers, leading to a kernel panic. Publicly reported details indicate a fix in the kernel (reverting a config...

DEBIAN-CVE-2025-38099

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Disable SCO support if READVOICESETTING is unsupported/broken A SCO connection without the proper voicesetting can cause the controller to lock up...

UBUNTU-CVE-2025-38099

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Disable SCO support if READVOICESETTING is unsupported/broken A SCO connection without the proper voicesetting can cause the controller to lock up...

CVE-2025-38128 Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject malformed HCICMDSYNC commands In 'mgmthcicmdsync', check whether the size of parameters passed in 'struct mgmtcphcicmdsync' matches the total size of the data i.e. 'sizeofstruct mgmtcphcicmdsync' plus...

ABB RMC-100 security vulnerability

The ABB RMC-100 is a remote modular controller from ABB Switzerland. Capable of managing automation, liquid and gas measurement, asset data centralization for large production and transmission facilities. ABB RMC-100 has a security vulnerability that stems from the use of hard-coded encryption ke...

ABB RMC-100 security vulnerability

The ABB RMC-100 is a remote modular controller from ABB Switzerland. Capable of managing automation, liquid and gas measurements, asset data centralization for large production and transmission facilities. A security vulnerability exists in the ABB RMC-100 that stems from the use of hard-coded...

ABB RMC-100 security vulnerability

The ABB RMC-100 is a remote modular controller from ABB Switzerland. Capable of managing automation, liquid and gas measurement, asset data centralization for large production and transmission facilities. A security vulnerability exists in the ABB RMC-100 that originates from a stack buffer...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from Bluetooth SCO support not being disabled when READVOICESETTING is not supported, which could lead to...

CVE-2025-6925

A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /src/main/java/org/dromara/demo/controller/MailController.java of the component Mail Handler. The manipulation of the argument filePath...