CVE-2022-3884

Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows Hitachi Ops Center Analyzer RAID Agent component allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01...

CVE-2022-41552

Server-Side Request Forgery SSRF vulnerability in Hitachi Infrastructure Analytics Advisor on Linux Data Center Analytics, Analytics probe components, Hitachi Ops Center Analyzer on Linux Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe components allows Server Side...

CVE-2022-4895

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux Analytics probe component, Hitachi Ops Center Analyzer on Linux Analyzer probe component allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00...

CVE-2024-7125

Authentication Bypass vulnerability in Hitachi Ops Center Common Services.This issue affects Hitachi Ops Center Common Services: from 10.9.3-00 before 11.0.2-01...

CVE-2024-10205

Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit Hitachi Ops Center Analyzer detail view component, Hitachi Infrastructure Analytics Advisor on Linux, 64 bit Hitachi Data Center Analytics component .This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00...

ambientagi (>=0.1.1 <=0.2.12), dataflex (=1.0.0) +10 more potentially affected by unknown CVE via gradio (>=5.0.0 <=5.12.0)

gradio PYPI version =5.0.0, =0.1.1, =1.0.1, =0.0.2, =1.1.8b3, =2025.1.24, =0.3.0, =0.0.1, =0.0.5, =0.9.1, =0.9.5 Source cves: unknown CVE Source advisory: SNYK:PYTHON-GRADIO-8685062...

SUSE CVE-2025-21657

In the Linux kernel, the following vulnerability has been resolved: schedext: Replace rqlock to rawspinrqlock in scxopsbypass scxopsbypass iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rqlock regardless of whether a CPU is offline or the CPU is currentl...

DEBIAN-CVE-2025-21657

In the Linux kernel, the following vulnerability has been resolved: schedext: Replace rqlock to rawspinrqlock in scxopsbypass scxopsbypass iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rqlock regardless of whether a CPU is offline or the CPU is currentl...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the use of an inappropriate lock in the scxopsbypass function in the schedext module. This could lead to unwanted...

SUSE CVE-2025-21645

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually enabled it, otherwise "wakedepth" for this IRQ will try to drop below zero a...

SUSE CVE-2024-57891

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...

UBUNTU-CVE-2024-57891

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...

ambientagi (>=0.1.1 <=0.2.12), deepchopper (>=1.0.1 <=1.3.1) +3 more potentially affected by CVE-2025-23042 via gradio (>=5.0.0 <=5.10.0)

gradio PYPI version =5.0.0, =0.1.1, =1.0.1, =1.1.8b3, =0.3.0, =0.6.3 - vuln-demo-math-ops =1.0.0 Source cves: CVE-2025-23042 Source advisory: SNYK:PYTHON-GRADIO-8623546...

PT-2025-40075

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The i40e driver in the Linux kernel contains a flaw related to debugfs files 'command' and 'netdev ops'. These files expose a debugging interface with questionable logic and potential fo...

DEBIAN-CVE-2024-56658

In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free in dstdestroy 1 Issue is in xfrm6netinit and xfrm4netinit : They copy xfrm46dstopstemplate into net-xfrm.xfrm46dstops. But net structure...

Malicious code in launchpad6-dev-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30c80c00a3a3fff99c7e886c9aa19aa90f914ed903e9039de87952a37921e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12151 Malicious code in launchpad6-dev-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30c80c00a3a3fff99c7e886c9aa19aa90f914ed903e9039de87952a37921e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SQL Injection

github.com/apache/trafficcontrol is vulnerable to SQL Injection. The vulnerability is due to improper input validation in Traffic Ops, allowing a privileged user with roles such as "admin," "federation," "operations," "portal," or "steering" to execute arbitrary SQL queries through...

GHSA-VQ94-9PFV-CCQR SQL injection in Apache Traffic Control

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

SQL injection in Apache Traffic Control

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...