Tenda AC18 Router Data Compromise

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the startIP parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of th...

CVE-2024-54090

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher...

CVE-2024-54090

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher...

CVE-2024-54090

CVE-2024-54090 affects APOGEE PXC Series (BACnet and P2 Ethernet) and TALON TC Series (BACnet). Affected devices contain an out-of-bounds read in the memory dump function, enabling a MED+ attacker with network access to drive the device into an insecure cold start state. CVSS metrics indicate MED...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Fixed the issue where gsstartio crashed due to accessing a null pointer. In some extreme cases, when the uSerial driver is accessed by multiple threads, Thread A executes the open operation and calls gsOpen...

Astra Linux – Vulnerability in Firefox, Thunderbird

Unexpected marking operations at the beginning of the sweeping process could lead to a use-after-free vulnerability. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

PT-2025-6199 · Unknown · Apogee Pxc Series +1

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series BACnet All versions APOGEE PXC Series P2 Ethernet All versions TALON TC Series BACnet All versions Description: A vulnerability has been identified that contains an out-of-bounds read in the memory dump function. This could...

Siemens APOGEE Series 缓冲区错误漏洞

Siemens APOGEE Series is a family of building automation and control systems from Siemens, Germany. A buffer error vulnerability exists in the Siemens APOGEE Series, which stems from an out-of-bounds read issue in the memory dump function of the affected device. This could allow an attacker with...

CVE-2024-54090: Out-of-bounds Read

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher...

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerability

A difficult to exploit vulnerability allows unauthenticated attackers with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can b...

PT-2025-18403

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved. The issue arises when checking TPM CHIP FLAG SUSPENDED after the call to tpm find get ops, which can lead to a spurious tpm chi...

Security update for iperf

This update for iperf fixes the following issues: update to 3.17.1 bsc1224262, CVE-2024-26306: BREAKING CHANGE: iperf3's authentication features, when used with OpenSSL prior to 3.2.0, contain a vulnerability to a side-channel timing attack. To address this flaw, a change has been made to the...

openjdk: Enhance array handling (Oracle CPU 2025-01)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can be...

openjdk: Enhance array handling (Oracle CPU 2025-01)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can be...

openjdk: Enhance array handling (Oracle CPU 2025-01)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can be...

openjdk: Enhance array handling (Oracle CPU 2025-01)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can be...

SUSE CVE-2024-57945

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: struct page VMEMMAPSTART - physrambase PAGESHIFT. And the struct page's va can be calculated with ...

CVE-2024-57543

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field dhcpstartip is copied to the stack without length verification...

AZL-67845 CVE-2024-57945 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap address In sparse vmemmap model, the virtual address of vmemmap is calculated as: struct page VMEMMAPSTART - physrambase PAGESHIFT. And the struct page's va can be calculated with ...

BIT-PYTHON-MIN-2022-42919

Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network...