Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in Linux Kernel. Vulnerabilities include a local or remote authenticated attacker could exploit the vulnerability to obtain sensitive information, to cause a denial of service condition and to cause a segmentation fault, ...

Security update for iperf

This update for iperf fixes the following issues: Update to version 3.18 CVE-2024-53580: Fixed a segmentation violation via the iperfexchangeparameters function. bsc1234705 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

ALSA: pcm: Add sanity NULL check for the default mmap fault handler

...

segmentation fault in win_line() in Vim < 9.1.1043

...

fs/ntfs3: Fix general protection fault in run_is_mapped_full

...

EDAC/igen6: Avoid segmentation fault on module unload

...

CVE-2025-24478

A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service...

CVE-2025-24478 5380/5580 Denial-of-Service Vulnerability

A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service...

CVE-2025-24478 5380/5580 Denial-of-Service Vulnerability

A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service...

CVE-2025-24478

CVE-2025-24478 describes a denial-of-service vulnerability impacting Rockwell Automation GuardLogix 5380 and 5580 controllers. The issue allows a remote, non-privileged attacker to send malicious requests that could cause a major nonrecoverable fault and a DoS condition. Publicly documented impac...

Advisory ROSA-SA-2025-2620

software: lua 5.3.6 WASP: ROSA-CHROME packageevrstring: lua-5.3.6-1 CVE-ID: CVE-2020-15945 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Lua: Vulnerability segmentation fault due to incorrect update of oldpc value during function control return. CVE-STATUS: Vulnerability resolved CVE-REV: To close the...

CVE-2025-24478: Improper Handling of Exceptional Conditions

A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service...

PT-2025-5368 · Rockwell Automation · 1756-L8Zs3 / 1756-L3Zs3 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A denial-of-service issue exists in the affected products. This could allow a remote, non-privileged user to send malicious requests, resulting in a maj...

CVE-2024-26588

A flaw was found in the Linux kernel's implementation of the BPF JIT compiler for LoongArch CPUs. An instruction index is incorrectly calculated, leading to out-of-bounds memory access. This issue may allow an attacker with the privileges necessary to run BPF programs on systems with affected CPU...

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

CVE-2025-22604

Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ssnetsnmpdiskio or ssnetsnmpdiskbytes, a part of each OID will be used as a key in an array that is...

CVE-2024-54145

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the getdiscoveryresults function of automationdevices.php using the network parameter. This vulnerability is fixed in 1.2.29...

CVE-2024-54145 Cacti has a SQL Injection vulnerability when request automation devices

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the getdiscoveryresults function of automationdevices.php using the network parameter. This vulnerability is fixed in 1.2.29...

CVE-2024-54146

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...

CVE-2024-45598 Cacti has a Local File Inclusion (LFI) Vulnerability via Poller Standard Error Log Path

Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the Poller Standard Error Log Path parameter in either Installation Step 5 or in Configuration-Settings-Paths tab to a local file inside the server. Then simply going to Logs tab and...