CVE-2025-30174

The CVE-2025-30174 entry applies to Siemens SIMATIC PCS neo, SINEC NMS, SINEMA Remote Connect, TIA Portal versions, and the User Management Component (UMC). Affected UMC versions contain an out-of-bounds read buffer overflow in the integrated UMC component, enabling an unauthenticated remote atta...

CVE-2025-20047: Improper Locking

Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Intel Graphics Drivers 输入验证错误漏洞

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. Intel Graphics Drivers suffers from an input validation error vulnerability that stems from improper input validation, which could lead to a denial of service attack...

Siemens多款产品 缓冲区错误漏洞

Siemens SINEMA Remote Connect and others are products of Siemens, Germany.Siemens SINEMA Remote Connect is a set of remote management platforms.Siemens SINEC NMS is a network management system NMS.Siemens SIMATIC PCS is a process control system. A buffer error vulnerability exists in several...

Siemens多款产品 缓冲区错误漏洞

Siemens SINEMA Remote Connect and others are products of Siemens, Germany.Siemens SINEMA Remote Connect is a set of remote management platforms.Siemens SINEC NMS is a network management system NMS.Siemens SIMATIC PCS is a process control system. A buffer error vulnerability exists in several...

Siemens SiPass Integrated

SUMMARY SiPass integrated versions before V2.95.3.18 contain an out of bounds read vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition. Siemens has released a new version for SiPass integrated and recommends to update to the latest version...

CVE-2025-30176: Out-of-bounds Read

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

CVE-2025-4536

A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can b...

CVE-2025-4536

CVE-2025-4536 affects Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0. The root cause is an incorrect operation/handling of the file /sysmgr/user/listByPage, enabling information disclosure. The vulnerability can be exploited remotely, and public disclosures exist. Vendor...

CVE-2025-4535: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information...

CVE-2025-4536: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can b...

Integrating Communication, Sensing, and Security: Progress and Prospects of PLS in ISAC Systems

The sixth generation of wireless networks defined several key performance indicators KPIs for assessing its networks, mainly in terms of reliability, coverage, and sensing. In this regard, remarkable attention has been paid recently to the integrated sensing and communication ISAC paradigm as an...

CVE-2025-20191 Multiple Cisco Products Denial of Service Vulnerability

A vulnerability in the Switch Integrated Security Features SISF of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected...

SUSE CVE-2022-49922

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend nfcmrvli2cncisend will be called by nfcmrvlncisend, and skb should be freed in nfcmrvli2cncisend. However, nfcmrvlncisend will only free skb when i2cmastersend return =...

CVE-2025-20191: Buffer Access with Incorrect Length Value

A vulnerability in the Switch Integrated Security Features SISF of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected...

DEBIAN-CVE-2022-49922

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend nfcmrvli2cncisend will be called by nfcmrvlncisend, and skb should be freed in nfcmrvli2cncisend. However, nfcmrvlncisend will only free skb when i2cmastersend return =...

Unspecified Vulnerability in JetBrains Rider

JetBrains Rider is a cross-platform .NET integrated development environment IDE from the Czech company JetBrains. A security vulnerability exists in JetBrains Rider that stems from a custom archive unpacker allowing arbitrary file overwrites during a remote debugging session, which can be exploit...

​​Explore practical best practices to secure your data with Microsoft Purview​​

According to the Microsoft 2024 Data Security Index, organizations experience an average of 156 data security incidents annually, and this cyberthreat continues to be a top concern for data security decision-makers.1 A full 82% of security decision-makers believe a comprehensive, fully integrated...

​​Explore practical best practices to secure your data with Microsoft Purview​​

According to the Microsoft 2024 Data Security Index, organizations experience an average of 156 data security incidents annually, and this cyberthreat continues to be a top concern for data security decision-makers.1 A full 82% of security decision-makers believe a comprehensive, fully integrated...

Faraday 5.13.0

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...