DEBIAN-CVE-2024-36348

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

DEBIAN-CVE-2024-36350

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...

ALPINE-CVE-2024-36350

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...

UBUNTU-CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2025-47422

Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged...

CVE-2025-7152

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/candidatesadd.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...

CVE-2025-47422

Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged...

AMD Processors 安全漏洞

AMD Processors is a processor from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Processors that stems from the possibility that an attacker could infer data in the L1D cache, potentially leading to the disclosure of sensitive information across privileged boundaries...

PT-2025-28502

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across...

PT-2025-28461 · Unknown · Advanced Installer

Name of the Vulnerable Software and Affected Versions: Advanced Installer versions prior to 22.6 Description: The issue is related to an uncontrolled search path element local privilege escalation. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writabl...

Advanced Installer 安全漏洞

Advanced Installer is a packaged software from Advanced Installer open source. A security vulnerability exists in versions of Advanced Installer prior to 22.6, which stems from improper control of the search path element and may result in local elevation of privilege...

CVE-2025-47422

Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged...

PT-2025-28501

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A transient execution issue in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...

CVE-2025-47422

CVE-2025-47422 affects Advanced Installer prior to 22.6. The flaw is an uncontrolled search path element that, when running as SYSTEM, can read non-existent binaries from standard-user writable locations and execute them with SYSTEM privileges, allowing arbitrary SYSTEM code execution if a malici...

CVE-2025-7151

The CVE-2025-7151 entry concerns Campcodes Advanced Online Voting System 1.0. The vulnerability resides in the /admin/voters_add.php handler, where manipulating the photo parameter enables unrestricted file upload, potentially allowing remote exploitation. Public disclosures and multiple adapters...

CVE-2025-7150 Campcodes Advanced Online Voting System voters_delete.php sql injection

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/votersdelete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit ha...

CVE-2025-7150

CVE-2025-7150 affects Campcodes Advanced Online Voting System v1.0. A vulnerability in /admin/voters_delete.php allows SQL injection via manipulation of the ID parameter. Exploitation can be performed remotely, and an exploit has been publicly disclosed. The issue exposes confidentiality, integri...

CVE-2025-7149

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/candidatesdelete.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The explo...

Security Bulletin: Security vulnerabilities in Java SE shipped with IBM CICS TX Advanced (CVE-2025-21587, CVE-2025-30698, CVE-2025-4447)

Summary There are multiple vulnerabilities in the Java SE version shipped with IBM CICS TX Advanced CVE-2025-21587, CVE-2025-30698, CVE-2025-4447. An update to IBM CICS TX Advanced has been released to address these vulnerabilities. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An...

PT-2025-28271 · Campcodes · Campcodes Advanced Online Voting System

Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A critical issue affects the processing of the file /admin/voters add.php, allowing unrestricted upload through the manipulation of the photo argument. This can be initiated...