2215 matches found
EUVD-2025-201204
In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpcrcvdsweepreqmpcginfo' is called conditionally from function 'ctcmpcunpackskb'. It frees passed mpcginfo. After that a call to function 'kfree' in function 'ctcmpcunpackskb' frees it...
Security Bulletin: A vulnerability in IBM Semeru Runtime affects z/Transaction Processing Facility
Summary There is a vulnerability in IBM® Semeru Runtime Certified Edition 11 and IBM® Semeru Runtime Certified Edition 21 that are used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-30754 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle...
CVE-2025-65946
Roo Code (AI-powered coding agent) had a validation error before version 3.26.7 that could cause it to automatically execute commands not on the allowed prefixes list. The issue has been patched in version 3.26.7. Affected CVE-2025-65946 entries from multiple feeds confirm the vulnerability and p...
IBM Db2 Denial of Service Vulnerability (CNVD-2025-29176)
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
IBM Db2 Denial of Service Vulnerability (CNVD-2025-29178)
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
IBM Db2 Denial of Service Vulnerability (CNVD-2025-29177)
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990638)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990638 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modifybitmap A system crash like this Failing address:...
bind security update
32:9.11.36-16.6 - Address various spoofing attacks CVE-2025-40778 32:9.11.36-16.5 - Add support for max-records-per-type and max-types-per-name options RHEL-61936 - Support reading of new options also in named-checkconf -z, v2...
CVE-2025-10693
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
EUVD-2025-37394
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-10693 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-10693 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-10693 Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
CVE-2025-10693
CVE-2025-10693 affects Silicon Labs’ Z‑Wave PIR Sensor Reference design in SiSDK v2025.6.0 and v2025.6.1. When SmartStart Inclusion fails, the PIR sensor may join the Z‑Wave network as a non‑secure device, exposing confidentiality and integrity (High) and impacting availability (Low) with a base ...
SiLabs Silicon Labs Z-Wave SDK 安全漏洞
The SiLabs Silicon Labs Z-Wave SDK is a development kit from SiLabs USA. A security vulnerability exists in SiLabs Silicon Labs Z-Wave SDK version v2025.6.0 and v2025.6.1, which stems from a device joining the network in a non-secure manner when SmartStart Inclusion fails...
PT-2025-44667
Name of the Vulnerable Software and Affected Versions Silicon Labs Z-Wave PIR Sensor Reference design versions 2025.6.0 through 2025.6.1 Description A failure during SmartStart Inclusion when onboarding a Z-Wave PIR sensor can result in the sensor joining the network as a non-secure device. This...
PT-2025-43794
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jamel.Z Tooltipy bluet-keywords-tooltip-generator allows Stored XSS.This issue affects Tooltipy: from n/a through = 5.5.9...
PT-2025-44990
Name of the Vulnerable Software and Affected Versions AMD processors affected versions not specified Description A flaw exists in the RDSEED instruction used for hardware-level random number generation on Zen 5 CPUs. This issue can cause the 16-bit and 32-bit versions of RDSEED to produce...
CVE-2023-53702
CVE-2023-53702 concerns the s390 ChaCha20 vector-accelerator path in the Linux kernel. The ChaCha20 library interface added in commit 349d03ffd5f6 allows using assembler vector instructions when available, but a MACHINE_HAS_VX check was not added, causing a crash if vector facilities are absent (...