Schneider Electric SESU backend link vulnerability

Schneider Electric SESU is a module for optimizing the efficiency of energy usage from Schneider Electric France. A backlink vulnerability exists in Schneider Electric SESU that stems from improper link resolution and could result in elevation of privilege or denial of service...

Adobe Substance3D Painter Out-of-Bounds Read Vulnerability (CNVD-2025-19239)

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

CVE-2025-5296: Improper Link Resolution Before File Access

CWE-59: Improper Link Resolution Before File Access 'Link Following' vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterpidresolvefiletemplateex function in the MP4Box utility of the GPAC multimedia platform is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-38546 atm: clip: Fix memory leak of struct clip_vcc.

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clipvcc. ioctlATMARPMKIP allocates struct clipvcc and set it to vcc-userback. The code assumes that vccdestroysocket passes NULL skb to vcc-push when the socket is closed, and then clippush...

Exploit for CVE-2024-32019

CVE-2024-32019 — Netdata ndsudo Local Privilege Escalation...

CVE-2025-38508

The CVE-2025-38508 entry describes a Linux kernel vulnerability in x86/SEV: when Secure TSC is enabled, GUEST_TSC_FREQ is derived from the P0 frequency and diverges from the mean TSC frequency, causing clock skew in SEV-SNP VMs and resulting in hrtimer interrupts firing earlier than expected. The...

OESA-2025-2011 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

CVE-2025-43490: Improper Link Resolution Before File Access

A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability...

SUSE CVE-2025-49090

The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...

Adobe Substance3D Painter buffer error vulnerability

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds write vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to execute...

Adobe Substance3D Painter buffer error vulnerability

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

BIT-LIBPHP-2023-0568 Array overrun in common path resolve code

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value,...

RHEL 8 : unbound (RHSA-2025:13575)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13575 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound Cache poisoning...

Linux Distros Unpatched Vulnerability : CVE-2021-47345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/cma: Fix rdmaresolveroute memory leak Fix a memory leak when mdaresolveroute is called more than once on the same rdmacmid. This is possible if...

CVE-2025-55188: Improper Link Resolution Before File Access

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

CVE-2025-50086 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50086 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2022-49808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit...

Mozilla Firefox Thunderbird Reverse DNS Resolver DoS

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the dependence of critical operations on the reverse DNS solution. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2023-5679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bad interaction between DNS64 and serve-stale may cause named to crash with an assertion failure during recursive resolution, when both of these features are...