PT-2025-40927

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description A Cross Site Scripting XSS issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS. Successful exploitation could allow attackers to obtain sensitiv...

UBUNTU-CVE-2025-39944

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...

EUVD-2025-28590

Malicious code in bioql PyPI...

EUVD-2025-28603

Malicious code in bioql PyPI...

EUVD-2025-26241

Malicious code in bioql PyPI...

EUVD-2025-30341

Malicious code in bioql PyPI...

EUVD-2025-31000

Malicious code in bioql PyPI...

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.

...

[SECURITY] Fedora 41 Update: ntpd-rs-1.6.2-1.fc41

Full-featured implementation of NTP with NTS support...

[SECURITY] Fedora 42 Update: ntpd-rs-1.6.2-1.fc42

Full-featured implementation of NTP with NTS support...

[SECURITY] Fedora 43 Update: ntpd-rs-1.6.2-1.fc43

Full-featured implementation of NTP with NTS support...

The vulnerability in the driver/drivers/ptp/ptp_ocp.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/ptp/ptpocp.c component of the Linux operating system relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-21488

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

CVE-2025-21484

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...

CVE-2025-21487

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21483

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

CVE-2025-21488 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

CVE-2025-21488 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

CVE-2025-21488

CVE-2025-21488 affects Qualcomm closed‑source components (Data Network Stack & Connectivity) and is caused by improper handling of padding bits when decoding RTP packet headers, leading to information disclosure in the UE. The CVE is described as a buffer over‑read/information leak. Public connec...

CVE-2025-21487 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...