PT-2025-13472

Name of the Vulnerable Software and Affected Versions Clinic Queuing System version 1.0 Description The issue is a Reflected Cross-Site Scripting XSS vulnerability. This could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter ...

Clinic Queuing System Cross-site Scripting Vulnerabilities

Clinic Queuing System is a clinic queuing system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Clinic Queuing System version 1.0, which stems from a reflective cross-site scripting attack that could execute JavaScript code via a malicious URL...

CVE-2025-2868: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the page parameter in /index.php...

Clinic Queuing System Cross-site Scripting Vulnerabilities

Clinic Queuing System is a clinic queuing system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Clinic Queuing System version 1.0, which stems from a reflective cross-site scripting attack that could execute JavaScript code via a malicious URL...

CVE-2025-2869: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter in /manageuser.php...

Linux kernel Privilege Escalation

The vulnerability of the bfqinitrq function in Linux kernel components related to block devices and the bfq subsystem is associated with errors that occur after deallocation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

net_sched: sch_sfq: don't allow 1 packet limit

...

Siemens SiPass Integrated Access Control Vulnerability

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens, Germany. An access control error vulnerability exists in Siemens SiPass Integrated V6.4.8 and prior versions, which stems from the device exposing multiple unauthenticated MQTT URLs, which could all...

AZL-59034 CVE-2025-21714 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

UBUNTU-CVE-2022-49411

In the Linux kernel, the following vulnerability has been resolved: bfq: Make sure bfqg for which we are queueing requests is online Bios queued into BFQ IO scheduler can be associated with a cgroup that was already offlined. This may then cause insertion of this bfqgroup into a service tree. But...

UBUNTU-CVE-2022-49412

In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that the parent of a bfqq changes between the moment we decide two queues are worth to merge and set bic-stablemergebfqq and the moment bfqsetupmerge is called. This...

UBUNTU-CVE-2022-49686

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix list double add in uvcgvideopump A panic can occur if the endpoint becomes disabled and the uvcgvideopump adds the request back to the reqfree list after it has already been queued to the endpoint. The...

UBUNTU-CVE-2022-49136

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

CVE-2022-49136 Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

CVE-2022-49136

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

CVE-2022-49136 Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

CVE-2022-49136 Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from bfq not ensuring that bfqg is online when queuing requests...