9735 matches found
CVE-2025-11148
All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...
kernel security update
4.18.0-553.77.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
CVE-2024-43192 IBM Storage TS4500 Library cross-site request forgery
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
PT-2025-39702
Name of the Vulnerable Software and Affected Versions IBM Storage TS4500 Library versions 1.11.0.0 and 2.11.0.0 Description The software is susceptible to cross-site request forgery, which could enable an attacker to perform unauthorized actions using the privileges of a trusted user...
CVE-2025-48707
An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...
IBM Watson Studio Cross-Site Scripting Vulnerability
IBM Watson Studio is a data science and machine learning platform from IBM, integrated into Cloud Pak for Data, for building, training and deploying AI models. A cross-site scripting vulnerability exists in IBM Watson Studio versions 4.0 through 5.2.0 that stems from not adequately filtering user...
FreeBSD : openvpn-devel -- script injection vulnerability from trusted but malicious server (e5cf9f44-9a64-11f0-8241-93c889bb8de1)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e5cf9f44-9a64-11f0-8241-93c889bb8de1 advisory. Gert Doering reports: Notable changes beta1 - beta2 are: ... add proper input sanitation to DNS strings...
CVE-2025-48707
An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...
CVE-2025-48707
An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...
CVE-2025-21481
Memory corruption while performing private key encryption in trusted application...
CVE-2025-21476
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
CVE-2025-48707
CVE-2025-48707 affects Stormshield Network Security (SNS) prior to 5.0.1. In some HA configurations, TPM authentication information could be shared among administrators, potentially enabling secret sharing and reducing isolation of admin credentials. Public sources in the connected documents cons...
Stormshield Network Security 安全漏洞
Stormshield Network Security SNS is a next-generation UTM Unified Threat Management firewall from Stormshield France. A security vulnerability exists in Stormshield Network Security versions prior to 5.0.1, which stems from the fact that TPM authentication information may be shared in HA use case...
CVE-2025-48707
An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...
CVE-2025-21476
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
CVE-2025-21481
Memory corruption while performing private key encryption in trusted application...
CVE-2025-21481 Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application...
CVE-2025-21481 Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application...
CVE-2025-21481
CVE-2025-21481 is linked to memory corruption during private key encryption in a trusted application, specifically within the Adreno GPU DRM driver. The PT-2025-23797 entry describes a use-after-free condition in the Direct Rendering Manager (DRM) Driver of the Adreno GPU, affecting unspecified A...