2921 matches found
PT-2025-39207
Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.2 Description CryptoLib is a software solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP for secure communications between spacecraft and ground stations. A command...
Imagination Graphics DDK 安全漏洞
Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in Imagination Graphics DDK, which originates from the possibility that an unprivileged user may execute an improper GPU system call, triggering a reuse-after-release kernel exception...
CVE-2025-26503
A crafted system call argument can cause memory corruption...
CVE-2025-34186
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...
CVE-2025-26503
A crafted system call argument can cause memory corruption...
CVE-2025-26503
The CVE-2025-26503 entry maps to a memory corruption issue triggered by a crafted system call argument. Connected sources reference Wind River VxWorks 7 as the affected platform, with CVSSv3.1 metrics indicating Local attack vector, High privileges required, No user interaction, and Confidentiali...
CVE-2025-26503 Buffer manipulation
A crafted system call argument can cause memory corruption...
CVE-2025-26503 Buffer manipulation
A crafted system call argument can cause memory corruption...
PT-2025-38473
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A crafted system call argument can cause memory corruption. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2025-57293
A command injection vulnerability in COMFAST CF-XR11 firmware V2.7.2 exists in the multipppoe API, processed by the sub423930 function in /usr/bin/webmgnt. The phyinterface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST request to...
CVE-2025-57293
COMFAST CF-XR11 firmware V2.7.2 is affected by a command injection in the multi_pppoe API (sub_423930 in /usr/bin/webmgnt). The phy_interface parameter is not sanitized, allowing an attacker to inject commands via POST to /cgi-bin/mbox-config?method=SET§ion=multi_pppoe; when action=one_click_...
CVE-2025-34186
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...
CVE-2025-34186
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Due to the binary's interpretation of non-zero...
CVE-2025-34186
Ilevia EVE X1/X5 Server (≤ 4.7.18.0.eden) contains a pre-authentication authentication bypass via unsanitized input passed to a system() call, where non-zero exit codes are treated as success, enabling remote attackers to bypass authentication and gain full system access. Related disclosures ment...
CVE-2025-34186 Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...
CVE-2025-34186 Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...
CVE-2025-34186
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...
PT-2025-38076
Name of the Vulnerable Software and Affected Versions Ilevia EVE X1/X5 Server versions prior to 4.7.18.0.eden Description The Ilevia EVE X1/X5 Server authentication mechanism has a flaw where unsanitized input is passed to a system call during authentication. This allows attackers to inject speci...
PT-2025-37681
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel related to the xsk socket kernel functionality. Specifically, the issue involves a potential NULL pointer dereference in the xsk transmit Tx pa...
Built-in Runtime Security for Containers
Security teams struggle with visibility into behaviors inside their running containers. Qualys is today announcing general availability of Container Runtime Security CRS to provide industry-leading visibility for running containers using an approach that is container-engine agnostic and layered...