CVE-2025-47211 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

EUVD-2025-32362

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1...

EUVD-2025-32325

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

CLSA-2025-1759496747 perl-HTTP-Tiny: Fix of CVE-2023-31486

CVE-2023-31486: fix insecure default TLS configuration...

CLSA-2025-1759485890 openvpn: Fix of CVE-2020-15078

CVE-2020-15078: fix authentication bypass and access to control channel data on servers configured with deferred authentication...

PT-2025-40604

Name of the Vulnerable Software and Affected Versions Minecraft RCON Terminal versions 0.1.0 through 2.0.6 Description The Minecraft RCON Terminal VS Code extension improperly stores passwords in plaintext within the settings.json file using VS Code's configuration API. This affects versions used...

PT-2025-40557

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 Description A path traversal issue exists in QNAP operating systems. A remote attacker with administrator privileges may be able t...

PT-2025-40570

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.3.0.3192 build 20250716 Description A NULL pointer dereference issue exists in QNAP operating...

PT-2025-40576

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker with administrator privileges can trigger a denial-of-service DoS condition due to a...

CVE-2025-11240

An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the user to a page of the attackers choice. This might open the...

jupyter-jupyterlab-4.4.9-1.1 on GA media (moderate)

jupyter-jupyterlab-4.4.9-1.1 on GA media Announcement ID: openSUSE-SU-2025:15591-1 Rating: moderate Cross-References: CVE-2025-59842 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Debian dsa-6016 : chromium - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6016 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6016-1 [email protected]...

SUSE CVE-2022-50465

In the Linux kernel, the following vulnerability has been resolved: ext4: fix leaking uninitialized memory in fast-commit journal When space at the end of fast-commit journal blocks is unused, make sure to zero it out so that uninitialized memory is not leaked to disk...

CVE-2025-61587 Weblate integration with Anubis can lead to Open Redirect via redir parameter

Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECTDOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an...

CVE-2025-38515 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38515 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38687 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38687 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38389 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38389 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

libxml2: Fix of CVE-2025-6021

CVE-2025-6021: fix integer overflows in buffer size calculations...

CLSA-2025-1759332050 libxml2: Fix of CVE-2025-6021

CVE-2025-6021: fix integer overflows in buffer size calculations...

UBUNTU-CVE-2023-53480

In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset-kobj.ktype in ksetregister When I register a kset in the following way: static struct kset mykset; kobjectsetname&mykset.kobj, "mykset"; ret = ksetregister&mykset; A null pointer dereference...