41615 matches found
CVE-2025-42877 Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
SAP Web Dispatcher, Internet Communication Manager ICM, and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerability. This results in high impact on the availability with no impact on confidentiality or integrity of the application...
CVE-2025-42873
SAPUI5 (and OpenUI5) packages include the markdown-it component with outdated third‑party libraries, enabling an infinite loop on specially malformed input. This DoS causes high CPU use and unresponsiveness by blocking the processing thread, with no confidentiality or integrity impact reported. N...
CVE-2025-42872
CVE-2025-42872 describes a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal. An unauthenticated attacker can inject scripts that run in other users’ browsers, potentially stealing session cookies, tokens, and other sensitive information. The impact is characterized as l...
PT-2025-49770
Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report. This could lead to a high impact on data confidentiality and a low impact on data integrity. There is no impact on...
CVE-2025-14345: Improper Locking
A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction...
OPENSUSE-SU-2025:15806-1 python311-Django4-4.2.27-1.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.27-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-49843
A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0.1. The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentiality, integrity, and availability...
The vulnerability in the driver module/gpio/gpio-wcd934x.c, a driver for supporting GPIO on the Linux operating system’s kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability in the driver/gpio/gpio-wcd934x.c driver for Linux kernel’s GPIO support is related to an incorrect bit shifting of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
SAP多款产品 缓冲区错误漏洞
SAP Web Dispatcher and others are products of SAP, Germany.SAP Web Dispatcher is a core component of Load Balancing, which supports load balancing and provides reverse proxy functionality, enabling external network users to access internal applications.SAP Internet Communication Manager SAP ICM i...
OPENSUSE-SU-2025:15807-1 regclient-0.11.1-1.1 on GA media
These are all security issues fixed in the regclient-0.11.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-49765
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the...
Linux Distros Unpatched Vulnerability : CVE-2025-2296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where an attacker may cause Improper Input Validation by local access. Successful exploitation of this vulnerability could...
OPENSUSE-SU-2025:15804-1 nvidia-open-driver-G07-signed-check-590.44.01-1.1 on GA media
These are all security issues fixed in the nvidia-open-driver-G07-signed-check-590.44.01-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-49980
Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 8.0.16 MongoDB Server versions prior to 7.0.26 MongoDB Server versions prior to 8.2.2 Description A flaw exists in the network two-phase commit protocol used for cross-shard transactions. This issue can lead to...
CVE-2025-40938: Use of Hard-coded Credentials
A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0.1. The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentiality, integrity, and availability...
MongoDB Server -- Improper Locking
https://jira.mongodb.org/browse/SERVER-106075 reports: A post-authenticationflaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short...
CLSA-2025-1765214003 Update of java-1.8.0-openjdk
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u472-b08 GA...
CVE-2025-66333
Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...
