17290 matches found
CVE-2025-55137
LinkJoin through 882f196 mishandles lacks type checking in password reset...
PT-2025-32272 · Linkjoin · Linkjoin
Name of the Vulnerable Software and Affected Versions: LinkJoin versions through 882f196 Description: LinkJoin mishandles token ownership in the password reset functionality. Recommendations: Update LinkJoin to a version beyond 882f196...
CVE-2025-55138
LinkJoin through 882f196 mishandles token ownership in password reset...
CVE-2025-55138
LinkJoin through 882f196 mishandles token ownership in password reset...
Fixed in Apache Tomcat 10.1.44
Important: DoS in HTTP/2 due to client triggered stream reset CVE-2025-48989 Tomcat's HTTP/2 implementation was vulnerable to the made you reset attack. The denial of service typically manifested as an OutOfMemoryError. This was fixed with commit 73c04a10. This issue was reported to the ASF...
Linux Distros Unpatched Vulnerability : CVE-2024-26847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the...
CVE-2025-48499
Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP Internet Printing Protocol or LPD Line Printer Daemon packet may cause a denial-of-service DoS condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service D...
Fixed in Apache Tomcat 9.0.108
Important: DoS in HTTP/2 due to client triggered stream reset CVE-2025-48989 Tomcat's HTTP/2 implementation was vulnerable to the made you reset attack. The denial of service typically manifested as an OutOfMemoryError. This was fixed with commit f36b8a4e. This issue was reported to the ASF...
Linux Distros Unpatched Vulnerability : CVE-2024-35994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes It turns out that while...
Fixed in Apache Tomcat 11.0.10
Important: DoS in HTTP/2 due to client triggered stream reset CVE-2025-48989 Tomcat's HTTP/2 implementation was vulnerable to the made you reset attack. The denial of service typically manifested as an OutOfMemoryError. This was fixed with commit f362c8eb. This issue was reported to the ASF...
Linux Distros Unpatched Vulnerability : CVE-2025-38091
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to get planeid Why & How Fix a false positive...
CVE-2025-48499
CVE-2025-48499 is an out-of-bounds write vulnerability in FUJIFILM Business Innovation MFPs. A specially crafted IPP or LPD packet can cause a denial-of-service (DoS) on affected devices; recovery requires an MFP reset. Several connected sources confirm the issue and, in at least one entry, advis...
WordPress Sala Theme 1.1.4 Privilege Escalation
WordPress Sala Theme versions 1.1.4 and below are vulnerable to an unauthenticated privilege escalation vulnerability. This flaw allows unauthenticated attackers to reset passwords of arbitrary users — including administrators — by directly invoking an exposed AJAX endpoint without verifying the...
CVE-2024-34327
Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form...
CVE-2025-1221
A Zigbee Radio Co-Processor RCP, which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system CPCd due to heavy Zigbee traffic, resulting in a Denial of Service DoS attack, Only hard reset will bring the device to normal operation...
CVE-2025-8468
A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has...
OESA-2025-1927 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: pcigeneric: Use pcitryresetfunction to avoid deadlock There are multiple places from where the recovery work gets scheduled asynchronously. Also,...
OESA-2025-1926 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: pcigeneric: Use pcitryresetfunction to avoid deadlock There are multiple places from where the recovery work gets scheduled asynchronously. Also,...
CVE-2025-8286
CVE-2025-8286 affects Güralp FMUS series seismic monitoring devices. The vulnerability is an unauthenticated Telnet-based command line interface that could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device. Affected products are exposed via a networ...