ROS-20251105-09

Zabbix universal monitoring system vulnerability is related to authorization errors. Exploitation vulnerability can allow a remote attacker to gain unauthorized access to protected information. protected information Vulnerability of Zabbix universal monitoring system is related to a logical error...

ROS-20251105-10

Zabbix universal monitoring system vulnerability is related to authorization errors. Exploitation vulnerability can allow a remote attacker to gain unauthorized access to protected information. protected information Vulnerability of Zabbix universal monitoring system is related to a logical error...

Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 Denial of Service Vulnerabilities (CNVD-2025-29073)

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A denial of service vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4, which stems from a lack of graceful err...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988778)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988778 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix warning in ext4handleinodeextension We got issue as follows: EXT4-fs error device loop...

UBUNTU-CVE-2025-43433

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption...

Splunk Web Unauthorized Access

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise relates to access control errors. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2025-12657

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

CLSA-2025-1762181946 frr: Fix of CVE-2023-38406

CVE-2023-38406: fix BGP Flowspec NLRI overflow vulnerability where zero-length packets could cause packet processing errors...

Blind-SQLi-StatusCode

Script en python...

IBM Verify Identity Access Privilege Bypass

The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Astra Linux – vulnerability in php8.2

In PHP versions:8.1. prior to 8.1.33, 8.2. prior to 8.2.29, 8.3. prior to 8.3.23, and 8.4. pgsql and pdopgsql escaping functions fail to verify whether the underlying quoting functions return an error. This may result in crashes if the Postgres server rejects the string as invalid...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulator supplies The driver retrieves and enables all regulator supplies in the probe path wcd9335parsedt and wcd9335poweronreset, but fails to clean up in final error paths and during...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot, identified an error see report 1 in the aqc111 driver, caused by incomplete sanitization of results from usb read calls. This issue is very...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8icecipherprepare Fix two DMA cleanup issues on the error path in sun8icecipherprepare: 1 If dmamapsg fails for areq-dst, the device driver would try to free DMA memory it has no...

CVE-2025-12516

Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

CVE-2025-12515

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

EUVD-2023-60046

Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of...

Linux io_waitid_wait() DoS

The vulnerability of the iowaitidwait function in the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability in the f2fsmergepagebio function within the Linux kernel is related to memory usage errors that occur after memory is freed. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux fs/ceph/export.c Heap Buffer Overflow DoS

The vulnerability of the fhtodentry function in the fs/ceph/export.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause a service failure...