Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-382076)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382076 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in functionstatshow Check whether denominator expression...

EUVD-2025-15353

Malicious code in bioql PyPI...

EUVD-2025-9423

Malicious code in bioql PyPI...

CVE-2025-10034

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-10034

D-Link DIR-825 1.08.01 is affected in the httpd component (ping6_response.cg) via get_ping6_app_stat; manipulating the ping6_ipaddr parameter triggers a buffer overflow. The flaw enables remote exploitation and is documented as already public. The vulnerability affects products no longer supporte...

CVE-2025-10034 D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

...

CVE-2025-9734 O2OA Personal Profile stat cross site scripting

A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /xqueryassembledesigner/jaxrs/stat of the component Personal Profile Page. The manipulation of the argument name/alias/description/applicationName results in cross site scripting. T...

CVE-2025-9734 O2OA Personal Profile stat cross site scripting

A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /xqueryassembledesigner/jaxrs/stat of the component Personal Profile Page. The manipulation of the argument name/alias/description/applicationName results in cross site scripting. T...

CVE-2025-9734

O2OA up to version 10.0-410 contains a cross-site scripting vulnerability in the Personal Profile Page component, triggered by manipulating the name/alias/description/applicationName arguments in the file path /x_query_assemble_designer/jaxrs/stat. The issue is exploitable remotely and, per sourc...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which stems from cross-site scripting due to incorrect manipulation of the parameter name/alias/description/applicationName in the file...

PT-2025-36373

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 1.08.01 Description: A buffer overflow issue exists in the httpd component of D-Link DIR-825. The get ping6 app stat function within the ping6 response.cg file is affected. Manipulation of the ping6 ipaddr argument can...

Linux Distros Unpatched Vulnerability : CVE-2011-4917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. CVE-2011-4917 Note that Nessus relies on the presence of the package as...

CVE-2025-8949

A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function getpingappstat of the file pingresponse.cgi of the component httpd. The manipulation of the argument pingipaddr leads to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2025-8949

A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function getpingappstat of the file pingresponse.cgi of the component httpd. The manipulation of the argument pingipaddr leads to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2025-8949 D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow

A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function getpingappstat of the file pingresponse.cgi of the component httpd. The manipulation of the argument pingipaddr leads to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2025-8949

CVE-2025-8949 concerns a stack-based buffer overflow in D-Link DIR-825 v2.10, affecting the httpd component’s ping_response.cgi function get_ping_app_stat. The vulnerability stems from unsafely handling the ping_ipaddr argument, enabling a remote attacker to overflow a stack buffer. Public disclo...

Linux Distros Unpatched Vulnerability : CVE-2019-11190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs such as /bin/su because installexeccreds is called too late in loadelfbinary in...

Linux Distros Unpatched Vulnerability : CVE-2022-49436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: Fix leaking nvdimmeventsmap elements Right now 'char ' elements allocated f...

Linux Distros Unpatched Vulnerability : CVE-2020-36785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomispalloccssstatbufs The s3abuf is freed along with...