Novel-Plus 安全漏洞

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has a security vulnerability that stems from a lack of authentication...

Novel-Plus 访问控制错误漏洞

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has an access control error vulnerability that stems from a lack of authentication...

Novel-Plus 访问控制错误漏洞

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has an access control error vulnerability that stems from a lack of authentication...

CVE-2025-2763

CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this...

PT-2025-17617 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns HTTP Request Smuggling in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2025-17624 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. There is no mention of the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

The vulnerability of Prisma Access Browser lies in the lack of authentication checks for a critical function, allowing attackers to escalate their privileges.

The vulnerability of Prisma Access Browser is related to the lack of authentication checks for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

CGA-M6PM-HH87-GPXX

Bulletin has no description...

CGA-8QC3-VGF8-9XWW

Bulletin has no description...

CGA-VFXC-FMJ5-957Q

Bulletin has no description...

CGA-FV7C-72G7-3XRV

Bulletin has no description...

CGA-3GR2-5PVR-HCJH

Bulletin has no description...

CGA-MWRC-549H-8Q65

Bulletin has no description...

CGA-V2F4-53FX-HCX7

Bulletin has no description...

CGA-4X2F-9XP9-VM6C

Bulletin has no description...

CVE-2025-22077

In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245d488801. Commit e9f2517a3e18 "smb: client: fix TCP timers deadlock after rmmod" is intended to fix a null-ptr-deref in...

CVE-2025-22045

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flushtlbrange when used for zapping normal PMDs On the following path, flushtlbrange can be used for zapping normal PMD entries PMD entries that point to page tables together with the PTE entries in the pointed-to pag...

CVE-2025-22028

In the Linux kernel, the following vulnerability has been resolved: media: vimc: skip .sstream for stopped entities Syzbot reported 1 a warning prompted by a check in callsstream that checks whether .sstream operation is warranted for unstarted or stopped subdevs. Add a simple fix in...

CVE-2025-22126

In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from mdnotifyreboot and mdexit, listforeachentrysafe is used, and this can race with deletint the next mddev, causing UAF: t1: spinlock...

CVE-2025-22057

In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dstrelease Upstream fix ac888d58869b "net: do not delay dstentriesadd in dstrelease" moved decrementing the dst count from dstdestroy to dstrelease to avoid accessing already freed data in cas...