CVE-2025-1260 On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch...

CVE-2025-27402 Tuleap is missing CSRF protections on tracker fields administrative operations

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability to trick victims into removing or updating tracker fields. This vulnerability i...

CVE-2025-27402

CVE-2025-27402 affects Tuleap, an open-source software lifecycle and collaboration suite. The vulnerability is a missing CSRF protection on tracker fields administrative operations, enabling an attacker to trick victims into removing or updating tracker fields. Affected code and impact are descri...

Hunters Announces New AI Capabilities with Pathfinder AI for Smarter SOC Automation

Boston and Tel Aviv, United States, 4th March 2025, CyberNewsWire...

Ubuntu: Security Advisory (USN-7316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2019-19391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or re...

Linux Distros Unpatched Vulnerability : CVE-2020-14339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged...

Linux Distros Unpatched Vulnerability : CVE-2015-1420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the handletopath function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigg...

Arista EOS 访问控制错误漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from an unrejected gNOI request that could lead to a data leak...

USN-7314-1: Kerberos vulnerabilities

It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. CVE-2024-26458, CVE-2024-26461 It was discovered that Kerberos incorrectly handled certain memory...

CVE-2025-1864

A flaw was found in radare2. This vulnerability allows buffer overflow via improper restriction of operations within the bounds of a memory buffer. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2024-43056 Buffer Over-read in Hypervisor

Transient DOS during hypervisor virtual I/O operation in a virtual machine...

Arbitrary File Read

Mattermost is vulnerable to Arbitrary File Read. The vulnerability is due to improper input validation when handling board patching and duplication. Specifically, the system fails to properly validate user input when duplicating a specially crafted block in Boards, allowing unauthorized access to...

USN-7312-1 opennds vulnerability

It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

USN-7312-1: openNDS vulnerability

It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

HCL SX 跨站请求伪造漏洞

HCL SX is an application from HCL India. A security vulnerability exists in HCL SX that stems from cross-site request forgery and allows an attacker to perform malicious and unauthorized operations...

DDSN Interactive Acora CMS 跨站请求伪造漏洞

DDSN Interactive Acora CMS is an enterprise web and mobile CMS from DDSN Interactive. A security vulnerability exists in DDSN Interactive Acora CMS version 10.1.1 that stems from a lack of CSRF protection and could lead to unauthorized operations...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Raptor vulnerabilities (USN-7316-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7316-1 advisory. It was discovered that Raptor incorrectly handled memory operations when processing certain input files. A remote attacke...

The vulnerability of the ECMP Dissector component in the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the ECMP Dissector component in the Wireshark computer network traffic analyzer is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause system failures...

SUSE CVE-2025-21801

In the Linux kernel, the following vulnerability has been resolved: net: ravb: Fix missing rtnl lock in suspend/resume path Fix the suspend/resume path by ensuring the rtnl lock is held where required. Calls to ravbopen, ravbclose and wol operations must be performed under the rtnl lock to preven...