37360 matches found
CVE-2025-36006 IBM Db2 denial of service
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial due to the improper release of resources after use...
CVE-2025-36006 IBM Db2 denial of service
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial due to the improper release of resources after use...
CVE-2025-53410
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...
CVE-2025-57712 Qsync Central
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...
OESA-2025-2632 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cacheshow The function cshow was called with protection from RCU. This only ensures that cp will not be freed...
OESA-2025-2623 nasm security update
NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump. Security Fixes...
[SECURITY] Fedora 42 Update: fcitx5-kkc-5.1.8-1.fc42
This provides libkkc input method support for fcitx5. Released under GPL3+...
AI SDK 安全漏洞
AI SDK is a TypeScript AI toolkit open-sourced by Vercel. A security vulnerability exists in AI SDK versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta, which stems from the possibility that a user could bypass the file type whitelist to upload a file...
PT-2025-45500
Name of the Vulnerable Software and Affected Versions mruby version 3.4.0 Description A flaw exists in mruby version 3.4.0 within the ary fill exec function located in the file mrbgems/mruby-array-ext/src/array.c. Manipulation of the start and length arguments can result in an out-of-bounds write...
编号撤回
libxml2 is a GNOME open source library for parsing XML documents. It is written in C and can be called by many languages, such as C, C++, XSH. A resource management error vulnerability exists in libxml2, which stems from an improper handling of namespace references in the xmlSetTreeDoc function,...
Linux Distros Unpatched Vulnerability : CVE-2025-12745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. Th...
Photon OS 5.0: Binutils PHSA-2025-5.0-0670
An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0670. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Out-of-bounds write vulnerability
A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been ma...
PT-2025-45492
Name of the Vulnerable Software and Affected Versions IBM Db2 versions 10.5.0 through 10.5.11 IBM Db2 versions 11.1.0 through 11.1.4.7 IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3 Description An authenticated user may be able to cause a denial of service in IBM Db...
PT-2025-49369
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the smb3 fs context parse param function within the CIFS client. The issue occurs when fsconfig is called multiple times, where memory associat...
IBM Db2 安全漏洞
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
CVE-2025-52881 affecting package runc for versions less than 1.3.3-1
CVE-2025-52881 affecting package runc for versions less than 1.3.3-1. A patched version of the package is available...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.1.3 release and security update
Red Hat JBoss Web Server 6.1.3 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...
CVE-2025-40777 affecting package bind for versions less than 9.20.15-1
CVE-2025-40777 affecting package bind for versions less than 9.20.15-1. An upgraded version of the package is available that resolves this issue...