EUVD-2022-54820

Malicious code in bioql PyPI...

EUVD-2023-52747

Malicious code in bioql PyPI...

RLSA-2025:12882 Moderate: jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fixes: jq: jq has signed integer...

CVE-2025-52432

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-44010

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1...

CVE-2025-44008

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1...

CVE-2025-44010

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1...

CVE-2025-46818

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

CVE-2025-52859

CVE-2025-52859 affects QNAP QTS and QuTS hero. A NULL pointer dereference has been reported to enable a remote attacker with administrator privileges to cause a denial-of-service (DoS). The vulnerability impacts multiple QNAP OS versions, with confirmed mitigation in: QTS 5.2.6.3195 build 2025071...

CVE-2025-52853

The CVE-2025-52853 issue affects QNAP QTS and QuTS hero software, caused by a NULL pointer dereference in core components. According to the sources, a remote attacker who has an administrator account can trigger a DoS condition on affected systems. The vulnerability is documented with attack vect...

EUVD-2025-32366

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

EUVD-2025-32368

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-48729 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-44008

CVE-2025-44008 describes a NULL pointer dereference in QNAP Qsync Central. The vulnerability allows a remote attacker with a user account to trigger a denial-of-service (DoS). Affected software appears to be Qsync Central prior to version 5.0.0.1. The issue has been fixed in Qsync Central 5.0.0.1...

EUVD-2025-32324

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

CVE-2025-33039

CVE-2025-33039 – Qsync Central : An allocation of resources without limits or throttling affects QNAP Qsync Central, enabling a DoS via resource exhaustion when a remote attacker with a user account acts. Public details describe impact on availability; CVSS metrics show a base score of 6.5 (3.1) ...

PT-2025-40553

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.2 Description A flaw exists in Qsync Central that allows a remote attacker, having obtained a user account, to exhaust resources and potentially prevent other systems, applications, or processes from...

PT-2025-40545

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.1 Description A flaw exists in Qsync Central where unrestricted resource allocation can occur. A remote attacker who obtains a user account may be able to prevent other systems, applications, or processes...

openSUSE Security Advisory (SUSE-SU-2025:03446-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2023-53490

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accept race Despite commit 0ad529d9fd2b "mptcp: fix possible divide by zero in recvmsg", the mptcp protocol is still prone to a race between disconnect or shutdown and accept. The root cause is that the...