CVE-2025-54388

A firewall state management issue was found in the Moby project. When the firewalld service is reloaded, it removes all iptables rules, including those created by Docker. While Docker should automatically recreate these rules, versions before 28.3.3 fail to recreate the specific rules that block...

MongoDB 8.0.x < 8.0.10 DoS (SERVER-106751)

The version of MongoDB installed on the remote host is 8.0 prior to 8.0.10. It is, therefore, affected by a vulnerability as referenced in the SERVER-106751 advisory. - MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition...

CVE-2025-54419

A signature verification flaw was found in the npm @node-saml/node-saml library. This flaw allows an attacker who has access to a validly signed document from the identity provider IdP to alter the content of the document, modify the details within the document, and have the modifications be...

CVE-2025-38397

CVE-2025-38397 is a Linux kernel vulnerability related to a suspicious RCU usage warning in nvme_mpath_add_sysfs_link() during NVMe over TCP tests. The connected SUSE/OpenSUSE advisories confirm a kernel fix addressing this RCU warning (nvme-multipath) in the Linux kernel, and indicate an updated...

CVE-2025-38379 smb: client: fix warning when reconnecting channel

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2reconnectserver, a dummy tcon is passed down to smb2reconnect with -queryinterface uninitialized, so we can't call queuedelayedwork on it. Fix...

CVE-2025-54566

A flaw was found in QEMU. A migration state inconsistency within the pciesriov emulation code allows an attacker with adjacent network access to trigger unexpected behavior. This condition arises from a state mismatch during migration processes, which can potentially lead to resource exhaustion...

NewStart CGSL MAIN 7.02 : avahi Multiple Vulnerabilities (NS-SA-2025-0174)

The remote NewStart CGSL host, running version MAIN 7.02, has avahi packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in Avahi. A reachable assertion exists in the avahialternativehostname function. CVE-2023-38473 - A flaw was found in avahi in versions...

NewStart CGSL MAIN 7.02 : python-cryptography Multiple Vulnerabilities (NS-SA-2025-0151)

The remote NewStart CGSL host, running version MAIN 7.02, has python-cryptography packages installed that are affected by multiple vulnerabilities: - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto woul...

CVE-2025-50151

A file path validation flaw has been discovered in Apache Jena. This flaw allows users with administrative access to upload arbitrary configurations. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2025-48965

A flaw was found in mbedtls. The mbedtlsasn1storenameddata function experiences a NULL pointer dereference when val.p is NULL while val.len is greater than zero, leading to a potential crash. This flaw allows a network-based attacker to trigger this condition, resulting in a denial of service...

CVE-2025-40924

A session id generation flaw has been discovered in the Catalyst::Plugin::Session Perl module. The session id is generated from a hash usually SHA-1 of a simple counter, the epoch time, the built-in rand function, the PID, and the current Catalyst context. This information is of low entropy. The...

Virtuozzo Hybrid Infrastructure 7.0 Hotfix 2 (7.0.0-253)

This update provides a stability fix. Vulnerability id: VSTOR-110793 A stability fix for VM live migration...

CVE-2025-53643

A request smuggling flaw was found in the aiohttp python library. If a pure Python version of aiohttp is installed, without the usual C extensions, for example, or if AIOHTTPNOEXTENSIONS is enabled, an attacker can execute a request smuggling attack to bypass certain firewalls or proxy protection...

AdvGrasp: Adversarial Attacks on Robotic Grasping from a Physical Perspective

Adversarial attacks on robotic grasping provide valuable insights into evaluating and improving the robustness of these systems. Unlike studies that focus solely on neural network predictions while overlooking the physical principles of grasping, this paper introduces AdvGrasp, a framework for...

net: ibmveth: make veth_pool_store stop hanging

...

Huawei HarmonyOS PDF preview module null pointer dereference vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A null pointer dereference vulnerability exists in the Huawei HarmonyOS PDF preview module, which can be exploited by an attacker to cause a functional...

Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15505)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15519)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...

Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15506)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15513)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...