CVE-2025-25061

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

CVE-2025-24317

CVE-2025-24317 affects JTEKT ELECTRONICS ViewJet C-more series and HMI GC-A2 series. The root cause is an Allocation of Resources Without Limits or Throttling (CWE-770). The vulnerability could allow a remote unauthenticated attacker to trigger a DoS condition, as described in multiple sources (N...

CVE-2025-24317

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service DoS condition...

CVE-2025-24317

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service DoS condition...

The vulnerability of the microprogrammed software of the ViewJet C-more Series and GC-A2 Series sensor panels, related to unlimited distribution of resources, allows a intruder to cause service failures.

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the microprogrammed software for ViewJet C-more Series and GC-A2 Series touch panels lies in their ability to bypass access control mechanisms, allowing intruders to compromise the integrity of the protected information.

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels lies in their ability to bypass access control mechanisms. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

CVE-2025-24317: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service DoS condition...

CVE-2025-25061: Unintended Proxy or Intermediary

Unintended proxy or intermediary 'Confused Deputy' issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack...

SUSE CVE-2025-21893

In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in keyput Once a key's reference count has been reduced to 0, the garbage collector thread may destroy it at any time and so keyput is not allowed to touch the key after that point. The most keyput is normally allow...

Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products

Overview HMI ViewJet C-more series and HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contain multiple vulnerabilities listed below. Improper Restriction of Rendered UI Layers or Frames CWE-1021 - CVE-2025-24310 Allocation of Resources Without Limits or Throttling CWE-770 -...

PT-2025-14825 · Unknown · Hmi Gc-A2 Series +1

Name of the Vulnerable Software and Affected Versions: HMI ViewJet C-more series affected versions not specified HMI GC-A2 series affected versions not specified Description: A resource allocation issue without limits or throttling exists, potentially allowing a remote unauthenticated attacker to...

JVN#17260367: Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products

HMI ViewJet C-more series and HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contain multiple vulnerabilities listed below. Improper Restriction of Rendered UI Layers or Frames CWE-1021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 4.3 CVE-2025-24310 Allocation of Resources...

PT-2025-14826 · Unknown · Hmi Gc-A2 Series +1

Name of the Vulnerable Software and Affected Versions: HMI ViewJet C-more series affected versions not specified HMI GC-A2 series affected versions not specified Description: The issue is related to an unintended proxy or intermediary problem, also known as 'Confused Deputy', which may allow a...

SUSE CVE-2025-2913

A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this issue is the function H5FLblkgclist of the file src/H5FL.c. The manipulation of the argument H5FLblkheadt leads to use after free. An attack has to be approached locally. The exploit has been disclosed...

DEBIAN-CVE-2025-21893

In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in keyput Once a key's reference count has been reduced to 0, the garbage collector thread may destroy it at any time and so keyput is not allowed to touch the key after that point. The most keyput is normally allow...

cpython3:fuzz_json_loads: Use-of-uninitialized-value in mark_stacks

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=5445337833865216 Project: cpython3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsonloads Job Type: libfuzzermsancpython3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mruby:mruby_fuzzer: Crash in mark_context

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4570806105735168 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000020470 Crash State:...

SUSE-SU-2025:0788-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Security Vulnerabilities fixed in Firefox ESR 128.8 MFSA 2025-16 bsc1237683 - CVE-2024-43097: Overflow when growing an SkRegion's RunArray - CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free in the Browser process -...

mruby:mruby_proto_fuzzer: Crash in gc_mark_children

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4793869883736064 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002000041b Crash Stat...

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: Update to version 20241128 git commit ea71da6f0690: i915: Update Xe2LPD DMC to v2.24 cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops iwlwifi: add Bz-gf FW for core89-91 release amdgpu: update smu 13.0.10 firmwar...