java-1.8.0-openjdk security update

1:1.8.0.462.b08-1.0.1 - Update to 8u462-b08 GA Orabug: 38248370 - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - Sync the copy of the portable specfile with the latest update - This tarball is embargoed unt...

CVE-2025-51624

Cross-site scripting XSS vulnerability in Zone Bitaqati thru 3.4.0...

CVE-2025-51624

Cross-site scripting XSS vulnerability in Zone Bitaqati thru 3.4.0...

CVE-2025-51624

Cross-site scripting XSS vulnerability in Zone Bitaqati thru 3.4.0...

CVE-2025-51624

CVE-2025-51624 is a Cross-site scripting (XSS) vulnerability in Zone Bitaqati up to version 3.4.0. The available metrics show a CVSS v3.1 base score of 7.6 (HIGH) with NETWORK attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI:N, S:U, C:H, I:L, A:L. The vulnerability is exploitabl...

PT-2025-32205 · Unknown · Zone Bitaqati

Name of the Vulnerable Software and Affected Versions: Zone Bitaqati versions through 3.4.0 Description: A cross-site scripting XSS issue exists in Zone Bitaqati. Recommendations: Update Zone Bitaqati to a version later than 3.4.0...

Zone Bitaqati 安全漏洞

Zone Bitaqati is an application from Zone Saudi Arabia. A security vulnerability exists in Zone Bitaqati version 3.4.0 and earlier, which stems from vulnerability to cross-site scripting attacks...

PT-2025-32521 · Linksys · Linksys Re9000 +5

Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 versions up to 20250801 Description: A vulnerability exists in Linksys range extenders. The issue affects the setDMZ function within the /goform/setDMZ file. Manipulation of the...

Security update for ignition

This update for ignition fixes the following issues: CVE-2025-22870: golang.org/x/net/http/httpproxy: Fixed proxy bypass using IPv6 zone IDs bsc1238681 CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing bsc1239192 Patch Instructions: To install this...

SUSE-SU-2025:20515-1 Security update for ignition

This update for ignition fixes the following issues: - CVE-2025-22870: golang.org/x/net/http/httpproxy: Fixed proxy bypass using IPv6 zone IDs bsc1238681 - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing bsc1239192...

go-toolset:rhel8 security update

An update is available for module.go-toolset, golang, module.delve, go-toolset, module.golang, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset...

Tenda AC8V4 Buffer Overflow Vulnerability (CNVD-2025-17345)

The Tenda AC8V4 is a wireless router from Tenda China. The Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow in the timeZone and timeType parameters in /goform/SetSysTimeCfg, which can be exploited by an attacker to crash the application...

CVE-2025-51085

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument timeZone and timeType leads to stack-based buffer overflow...

CVE-2025-8160

A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the component httpd. The manipulation of the argument timeZone leads to buffer overflow. It is possible to launch the attack remotely. The...

Tenda AC20 安全漏洞

Tenda AC20 is a dual-band wireless router with IPv6 protocol support, featuring a triple-core 1GHz main controller with six 6dBi external antennas and a maximum wireless transmission rate of 2033Mbps. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from improper handli...

CVE-2025-51085

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument timeZone and timeType leads to stack-based buffer overflow...

CVE-2025-51085

Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument timeZone and timeType leads to stack-based buffer overflow...

Tenda AC8V4 安全漏洞

The Tenda AC8V4 is a wireless router from Tenda China. The Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a stack buffer overflow in the timeZone and timeType parameters in /goform/SetSysTimeCfg, which can be exploited by an attacker to crash the application...

CVE-2025-46117

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script .apdebug.sh invoked from the restricted CLI does not properly sanitize its input, allowing an authenticated attacker to...

CommScope Ruckus Unleashed和CommScope Ruckus ZoneDirector 安全漏洞

CommScope Ruckus Unleashed and CommScope Ruckus ZoneDirector are both wireless routers from CommScope USA. A security vulnerability exists in CommScope Ruckus Unleashed versions prior to 200.14.6.1.203 and CommScope Ruckus ZoneDirector, which stems from a path traversal flaw that could lead to th...