Oracle Linux 8 : kernel (ELSA-2025-18297)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18297 advisory. - ALSA: hda/ca0132: Fix buffer overflow in addtuningcontrol CKI Backport Bot RHEL-114840 CVE-2025-39751 - crypto: seqiv - Handle EBUSY correctly CKI...

EUVD-2025-34983

The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...

CVE-2025-10750 PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure

The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...

CVE-2025-8414 Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...

CVE-2025-8414 Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...

CVE-2025-8414

CVE-2025-8414 affects Zigbee EZSP Host Applications and is caused by improper input validation leading to a buffer overflow. This can cause stack corruption and, under certain conditions, arbitrary code execution. Exploitation requires access to a network key. The CVSS 4.0 score is CRITICAL (AV: ...

CVE-2025-8414 Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...

CVE-2025-9548

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

CVE-2025-9548

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

EUVD-2025-34615

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

CVE-2025-9548

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

CVE-2025-9548

CVE-2025-9548 concerns Lenovo Power Management Driver. A null pointer dereference vulnerability could allow a local authenticated user to cause a Windows blue screen (BSOD). Documented impact is local, with high availability impact and no confidentiality/integrity impact per CVSS 3.1/4.0 vectors;...

CVE-2025-9548

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error...

CVE-2025-9177

A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover...

CVE-2025-41703

An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command...

Lenovo Power Management Driver 安全漏洞

Lenovo Power Management Driver is a power management driver from Lenovo China. A security vulnerability exists in Lenovo Power Management Driver, which stems from the presence of a null pointer dereference that could lead to a Windows blue screen error...

Lenovo Power Management Driver Vulnerability - Lenovo Support US

No description provided...

EUVD-2025-34192

A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover...

CVE-2025-9177

A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover...

CVE-2025-9177

Rockwell Automation 1715 EtherNet/IP Comms Module/Adapter is affected by CVE-2025-9177. A denial-of-service vulnerability arises from a high volume of requests to the device's web server, which can cause the web server to crash. Impact described across sources: requires a power cycle to recover a...