7743 matches found
CVE-2025-60179
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Space Studio Click & Tweet allows Stored XSS. This issue affects Click & Tweet: from n/a through 0.8.9...
SUSE SLES12 Security Update : jasper (SUSE-SU-2025:03367-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03367-1 advisory. - CVE-2025-8835: missing range check in the JPEG-2000 JPC Encoder leads to assertion failure and crash when processing a malformed JPEG2000...
CVE-2025-60179
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Space Studio Click & Tweet allows Stored XSS. This issue affects Click & Tweet: from n/a through 0.8.9...
SUSE-SU-2025:03367-1 Security update for jasper
This update for jasper fixes the following issues: - CVE-2025-8835: missing range check in the JPEG-2000 JPC Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid cblkwidth parameter bsc1247904. - CVE-2025-8836: out-of-bounds array indexing in...
PT-2025-39616
Name of the Vulnerable Software and Affected Versions Space Studio Click & Tweet versions through 0.8.9 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Cross-site Scripting XSS. This specific instance is a...
CVE-2025-27030
information disclosure while invoking calibration data from user space to update firmware size...
CVE-2025-59534
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in...
Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike
A suspected cyber espionage activity cluster that was previously found targeting global government and private sector organizations spanning Africa, Asia, North America, South America, and Oceania has been assessed to be a Chinese state-sponsored threat actor. Recorded Future, which was tracking...
CVE-2025-27030
information disclosure while invoking calibration data from user space to update firmware size...
CVE-2025-27030
CVE-2025-27030 is described as an information disclosure in Qualcomm audio components, tied to Pixel Watch security bulletin coverage. The connected Pixel Watch bulletin lists this CVE under the Qualcomm components table with the vulnerability type as Audio and notes a patch level requirement of ...
CVE-2025-27030 Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size...
USN-7768-1 dpkg vulnerability
It was discovered that dpkg incorrectly handled removing certain temporary directories. An attacker could possibly use this issue to consume disk space, leading to a denial of service...
USN-7768-1: dpkg vulnerability
It was discovered that dpkg incorrectly handled removing certain temporary directories. An attacker could possibly use this issue to consume disk space, leading to a denial of service...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from a potential information leak when calibration data is called from user space to update firmware size...
PT-2025-39271
Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description An information disclosure issue exists when invoking calibration data from user space to update firmware size. The issue allows for the disclosure of information. Recommendatio...
CVE-2025-59534
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in...
CVE-2025-59534 CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in...
CVE-2025-54081 SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution
Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...
PT-2025-39207
Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.2 Description CryptoLib is a software solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP for secure communications between spacecraft and ground stations. A command...
