2528 matches found
GHSA-52MM-4RG6-P426 vulnerabilities
Vulnerabilities for packages: mysql...
Security update for vim
This update for vim fixes the following issues: vim was updated to 9.1.1101: CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 CVE-2024-43790: Fixed Out of bounds read when performing a search command bsc1229685 CVE-2024-43802: Fixed heap-buffer-overflow in instypebuf bsc1229822...
CVE-2025-1634
A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError. Mitigation...
OPENSUSE-SU-2025:0072-1 Security update for radare2
This update for radare2 fixes the following issues: - CVE-2025-1378: Fixed memory corruption boo1237250 https://github.com/radareorg/radare2/releases/tag/5.9.0 Update to version 5.8.8: For details, check full release notes Faster analysis, type matching, binary parsing 2-4x Add assembler for risc...
INE Security’s Cybersecurity and IT Training Enhances Career Stability in Tech
Cary, North Carolina, 19th February 2025, CyberNewsWire...
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: CVE-2025-24970: incorrect validation of packets by SslHandler can lead to a native crash. bsc1237037 CVE-2025-25193: unsafe reading of environment files can lead to an application crash. bsc1237038 Update to netty version 4.1.118 a...
CVE-2025-1372
A flaw was found in GNU elfutils. This vulnerability allows buffer overflow, potentially leading to arbitrary code execution or crashes via manipulation of the 'z/x' argument in the dumpdatasection/printstringsection function of readelf.c. Mitigation Mitigation for this issue is either not...
CVE-2024-12054
ZF Roll Stability Support Plus RSSPlus is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely proximal/adjacent with RF equipment or via pivot from J2497 telematics devices call diagnostic...
CVE-2024-12054 ZF Roll Stability Support Plus (RSSPlus) Authentication Bypass By Primary Weakness
ZF Roll Stability Support Plus RSSPlus is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely proximal/adjacent with RF equipment or via pivot from J2497 telematics devices call diagnostic...
CVE-2024-12054
CVE-2024-12054 concerns ZF Roll Stability Support Plus (RSSPlus). The vulnerability is an authentication bypass in the deterministic RSSPlus SecurityAccess service seeds, enabling an attacker — proximate with RF equipment or via pivot from J2497 telematics devices — to remotely call diagnostic fu...
CVE-2024-12054 ZF Roll Stability Support Plus (RSSPlus) Authentication Bypass By Primary Weakness
ZF Roll Stability Support Plus RSSPlus is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely proximal/adjacent with RF equipment or via pivot from J2497 telematics devices call diagnostic...
PT-2025-6515
Name of the Vulnerable Software and Affected Versions ZF Roll Stability Support Plus RSSPlus affected versions not specified Description The issue is related to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds. This may allow an attacker to...
CVE-2024-12054: Authentication Bypass by Primary Weakness
ZF Roll Stability Support Plus RSSPlus is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely proximal/adjacent with RF equipment or via pivot from J2497 telematics devices call diagnostic...
ZF Roll Stability Support Plus 安全漏洞
ZF Roll Stability Support Plus ZF RSSPlus is an industrial control application from ZF Corporation. A security vulnerability exists in ZF Roll Stability Support Plus that originates in the deterministic security access service seed resulting in authentication bypass...
tbb security update
2018.2-10.1 - Remove jQuery from Doxygen files RHEL-77669 2018.2-10 - Apply patches from BZ 1907561 - Bump release...
Azure Linux 3.0 Security Update: kernel (CVE-2024-50040)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50040 advisory. - In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after...
Azure Linux 3.0 Security Update: qemu / qemu-kvm (CVE-2022-35414)
The version of qemu / qemu-kvm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-35414 advisory. - softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translatefail path...
Azure Linux 3.0 Security Update: kernel (CVE-2024-42244)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42244 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resum...
CVE-2020-11090
In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down...