Vertikal Systems Hospital Manager Backend Services 安全漏洞

Vertikal Systems Hospital Manager Backend Services is a hospital information management system from Vertikal Systems, Romania. A security vulnerability exists in Vertikal Systems Hospital Manager Backend Services versions prior to September 19, 2025, which stems from the exposure of an...

PT-2025-44349

Name of the Vulnerable Software and Affected Versions Hospital Manager Backend Services versions prior to September 19, 2025 Description The Hospital Manager Backend Services exposed the ASP.NET tracing endpoint ''/trace.axd'' without authentication before September 19, 2025. This allowed a remot...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2021-38202)

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd. This plugin only works with Tenable.ot. Please visit...

EUVD-2022-54694

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix call trace observed during I/O with CMF enabled The following was seen with CMF enabled: BUG: using smpprocessorid in preemptible code: systemd-udevd/31711 kernel: caller is lpfcupdatecmfcmd+0x214/0x420 lpfc kerne...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987614)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987614 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987715 advisory. In the Linux kernel, the following vulnerability has been resolved: traceeventshist: add check for return value of 'createhistfield' Function 'createhistfield' is...

EUVD-2025-35034

Malicious code in user-trace-fingerprint npm...

MAL-2025-48525 Malicious code in user-trace-fingerprint (npm)

The package user-trace-fingerprint was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54bd77b470e3a22898330418ebfb04770ae12aa0de66208968d637cca6c03f2 Any computer that has this package installed or running should be considered full...

Malicious code in user-trace-fingerprint (npm)

The package user-trace-fingerprint was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54bd77b470e3a22898330418ebfb04770ae12aa0de66208968d637cca6c03f2 Any computer that has this package installed or running should be considered full...

CVE-2025-10750

The CVE CVE-2025-10750 concerns the WordPress PowerBI Embed Reports plugin (

OESA-2025-2470 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining t...

SUSE CVE-2025-39995

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state-timer is a cyclic timer that schedules worki2cpoll and delayedworkenablehotplug, while rearming itself. Using timerdelete fails to guarantee...

org.opensearch.dataprepper.plugins:otel-trace-group-processor (>=2.12.0 <=2.12.1) potentially affected by CVE-2025-62371 via org.opensearch.dataprepper.plugins:opensearch (>=2.12.0 <=2.12.1)

org.opensearch.dataprepper.plugins:opensearch MAVEN version =2.12.0, =2.12.0, =2.12.1 Source cves: CVE-2025-62371 Source advisory: SNYK:JAVA-ORGOPENSEARCHDATAPREPPERPLUGINS-13561982...

CVE-2025-59197

Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally...

EUVD-2025-34296

Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally...

CVE-2025-59197 Windows ETL Channel Information Disclosure Vulnerability

...

Linux Distros Unpatched Vulnerability : CVE-2023-53649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf trace: Really free the evsel-priv area In 3cb4d5e00e037c70 perf trace: Free syscall tp...

Wireshark 4.2.x < 4.2.14 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.2.14. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.14 advisory. - MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service CVE-2025-11626...

SUSE CVE-2023-53649

In the Linux kernel, the following vulnerability has been resolved: perf trace: Really free the evsel-priv area In 3cb4d5e00e037c70 "perf trace: Free syscall tp fields in evsel-priv" it only was freeing if strcmpevsel-tpformat-system, "syscalls" returned zero, while the corresponding initializati...

EUVD-2025-31837

A vulnerability has been found in JhumanJ OpnForm up to 1.9.3. This vulnerability affects unknown code of the file /custom-domains of the component API Endpoint. Such manipulation leads to missing authorization. The attack may be launched remotely. The exploit has been disclosed to the public and...