ROS-20251028-11

A vulnerability in the NVIDIA Container Toolkit container creation and launch software and the NVIDIA GPU Operator resource management software is associated with synchronization errors. NVIDIA GPU Operator resource management software is associated with synchronization errors when using a shared...

The vulnerability of the ProFTPD FTP server, related to errors in the authentication process, allows attackers to manipulate data.

The vulnerability of the ProFTPD FTP server is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the ProFTPD FTP server, related to errors in the authentication process, allows attackers to manipulate data.

The vulnerability of the ProFTPD FTP server is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the fuse_evict inode() function in the fs/fuse/inode.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fuseevict inode function in the fs/fuse/inode.c file of the Linux kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the msdc_prepare_data() function in the mtk-sd component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the msdcpreparedata function in the mtk-sd component of the Linux operating system’s kernel is related to memory errors after memory is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system, related to pointer arithmetic errors, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker, working remotely, to cause service interruptions...

The vulnerability of the hw/pci/pcie_sriov.c component of the QEMU hardware emulation software allows a hacker to execute arbitrary code.

The vulnerability of the hw/pci/pciesriov.c component of the QEMU hardware emulation software is related to errors in representing certain functions. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

EUVD-2025-36331

Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

PT-2025-53529

Уязвимость системы сбора и анализа событий безопасности IBM QRadar SIEM связана с ошибками присваивания привилегий. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-38619)

usb-storage: alauda: Check whether the media is initialized. The member uzonesize of struct alaudainfo will remain 0 if alaudainitmedia fails, potentially causing divide errors in alaudareaddata and alaudawritelba. This plugin only works with Tenable.ot. Please visit...

CVE-2025-34155

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the improper use of boolean values in the afalgctx structure, which could lead to data conversion errors...

EUVD-2025-35703

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

CVE-2025-34155

CVE-2025-34155 affects Tibbo AggreGate Network Manager versions prior to 6.40.05. The issue is an observable discrepancy in login failure messages that reveals whether a provided username exists, enabling unauthenticated remote user enumeration and potentially aiding targeted brute-force/credenti...

CVE-2025-34155 Tibbo AggreGate Network Manager < 6.40.05 Login Functionality User Enumeration

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

EUVD-2022-54620

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: Fix boundary conditions in interpolation The functions powersupplytemp2resistsimple and powersupplyocv2capsimple handle boundary conditions incorrectly. The change was introduced in...

ROS-20251023-01

A vulnerability in the cifscomposemountoptions function of the fs/smb/client/cifsproto.h module of the SMB client support kernel of the Linux operating system is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of LoongArch’s kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the LoongArch component in the Linux operating system’s kernel is related to resource management errors in the playdead function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Microsoft Edge browser’s Media component, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Edge browser’s Media component is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...