CVE-2024-50629

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors...

CVE-2024-10441

Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allows remote attackers to execute arbitrary code via unspecified vectors...

IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer Unspecified Vulnerability (CNVD-2025-05561)

IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer are both products of International Business Machines IBM.IBM InfoSphere Information Server is a data integration platform. The platform can be used to integrate data information obtained from various sources.IBM InfoSphe...

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic

...

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact

...

PT-2025-11055 · Google · Android

Name of the Vulnerable Software and Affected Versions: sdp discovery affected versions not specified Description: A use after free issue exists in the process service attr rsp function of sdp discovery.cc. This could lead to remote code execution without requiring additional privileges or user...

PT-2025-11059 · Google · Android

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software is susceptible to a tapjacking/overlay attack, potentially allowing for local escalation of privilege without requiring additional execution privileges or user interaction. The attack...

PT-2025-10844

Name of the Vulnerable Software and Affected Versions: Azure Arc affected versions not specified Description: The issue is related to improper neutralization of special elements used in a command, also known as 'command injection', in Azure Arc. This allows an authorized attacker to elevate...

PT-2025-9908

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly mentioned. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CGA-5QC6-JX47-5RM4

Bulletin has no description...

PT-2025-9117 · Unknown · Dario Health

Name of the Vulnerable Software and Affected Versions: Dario Health affected versions not specified Description: The issue concerns the exposure of development environment details in the Dario Health Internet-based server infrastructure, potentially leading to unsafe functionality. Recommendation...

CGA-45PG-GV9V-4245

Bulletin has no description...

CVE-2024-54456

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfssysfslinkrpcclient name is char64 where the size of clnt-clprogram-name remains unknown. Invoking strcat directly will also lead to potential buffer overflow. Change them to strscpy and...

PT-2025-8359 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where a stale list iterator could be dereferenced after a loop, potentially leading to out-of-bounds or undefined values being loaded...

PT-2025-13218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the uprobes feature. The issue occurs when the shared zeropage is not properly rejected in the uprobe write opcode...

RHEL 9 : mysql (RHSA-2025:1767)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1767 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries...

PT-2025-7695 · Eventer · Eventer

Name of the Vulnerable Software and Affected Versions: Eventer affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: At the moment, there is...

PT-2025-7645 · To-Do · To-Do

Name of the Vulnerable Software and Affected Versions: To-Do affected versions not specified Description: The issue is related to a cross-site scripting vulnerability that affects the title field of a To-Do. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2025-7482 · Medixant · Medixant Radiant Dicom Viewer

Name of the Vulnerable Software and Affected Versions: Medixant RadiAnt DICOM Viewer affected versions not specified Description: The issue is due to the failure of the update mechanism to verify the update server's certificate, which could allow an attacker to alter network traffic and carry out...

PT-2025-7453 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason, but no further explanation is given...