13279 matches found
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989784)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989784 advisory. In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference ...
UBUNTU-CVE-2025-43433
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption...
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise relates to access control errors. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2025-12657
The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...
CLSA-2025-1762181946 frr: Fix of CVE-2023-38406
CVE-2023-38406: fix BGP Flowspec NLRI overflow vulnerability where zero-length packets could cause packet processing errors...
Blind-SQLi-StatusCode
Script en python...
The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to errors in privilege management, allowing attackers to elevate their privileges.
The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: crypto: sun8i-ce-cipher – Fixed error handling in sun8icecipherprepare. Fixed two DMA cleanup issues on the error path in sun8icecipherprepare: 1. If dmamapsg fails for areq-dst, the device driver will attempt to free DMA memo...
Astra Linux – Vulnerability in PHP 8.2
In PHP versions 8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, and 8.4. pgsql and pdopgsql versions, the escaping functions do not check whether the underlying quoting functions return errors. This could lead to crashes if the Postgres server rejects the string as invalid...
CVE-2025-12515
Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12516
Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
EUVD-2023-60046
Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of...
The vulnerability of the __fh_to_dentry() function in the fs/ceph/export.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fhtodentry function in the fs/ceph/export.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the io_waitid_wait() function in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the iowaitidwait function in the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the f2fs_merge_page_bio() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the f2fsmergepagebio function in the Linux operating system is related to memory errors after its release. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the application software interface of the Git-based software platform for collaborative code development on GitLab EE, related to access control errors, allows a malicious actor to gain unauthorized access to agents from another project.
The vulnerability of the application software interface of the Git-based software platform for collaborative code development on GitLab EE is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to agents fr...
The vulnerability of the p9_read_work() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the p9readwork function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the driver/uio/uio_hvgeneric.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/uio/uiohvgeneric.c module in Linux kernels is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2025-61959
Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...