UBUNTU-CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

EUVD-2025-198076

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119

CVE-2025-12119 affects the MongoDB C driver: when using a bulk operation, mongoc_bulk_operation_t may read invalid memory if large options are passed. Connected advisories confirm the issue in the mongo-c-driver and reference Debian’s fix in version 1.17.6-1+deb11u2 for bullseye. Other listings (...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

PT-2025-47384

Name of the Vulnerable Software and Affected Versions pnetlab version 5.3.11 Description The software contains a flaw due to which an attacker could inject commands. This occurs through manipulation of the qemu options parameter. Recommendations At the moment, there is no information about a newe...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

Pnetlab version 5.3.11 is vulnerable to a Command Injection vulnerability (CWE-77) caused by the improper neutralization of special elements in the qemu_options parameter. An attacker can exploit this flaw by manipulating the parameter to execute arbitrary commands. No patch or newer version cont...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

PT-2025-47407

Name of the Vulnerable Software and Affected Versions mongoc affected versions not specified Description A mongoc bulk operation t may encounter an issue where it reads invalid memory when handling large options. Recommendations At the moment, there is no information about a newer version that...

PNETLab security vulnerabilities

PNETLab is a platform from PNETLab Inc. that allows labs to be downloaded and shared with the community. A security vulnerability exists in PNETLab version 5.3.11 that stems from the qemuoptions parameter being vulnerable to command injection attacks...

mongo-c-driver security vulnerability

mongo-c-driver is an official MongoDB driver in C for the MongoDB open source. A security vulnerability exists in mongo-c-driver, which stems from the possibility of reading invalid memory when passing large options...

WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Make Email Customizer for WooCommerce versions = 1.0.6...

ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

...

SUSE-SU-2025:4096-1 Security update for binutils

This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: New versioned release of libsframe.so.2 s390: tools now support SFrame format 2; recognize 'z17' as CPU name bsc1247105, jscIBM-1485 sframe sections are n...

SUSE CVE-2025-40198

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

CVE-2025-64726

Socket Firewall (sfw) is affected for binary versions prior to 0.15.5. The vulnerability allows arbitrary code execution when run in an untrusted project directory by placing a malicious .sfw.config; loading the file populates environment variables into the Node.js process, enabling an attacker t...