CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20022

CVE-2025-20022 affects Intel® Tiber™ Edge Platform Edge Orchestrator (Edge Orchestrator software before 24.11). Root cause: insufficient control flow management in the affected component, enabling a privileged user to potentially disclose information via adjacent access. Impact (as per sources): ...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20004

CVE-2025-20004 affects Intel Xeon 6 Processor E-Cores firmware through the Alias Checking Trusted Module due to insufficient control-flow management, enabling privilege escalation from local access. Risk context is High (CVSS 3.1/4.0; local access, high privileges). Intel Intel-SA-01273 documents...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2025-21072 · Intel · Intel Tiber Edge Platform Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator affected versions not specified Description: The issue is related to insufficient control flow management in some Edge Orchestrator software for IntelR Tiber™ Edge Platform. This may allow a...

Intel Tiber Edge Platform Edge Orchestrator 安全漏洞

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. A security vulnerability exists in Intel Tiber Edge Platform Edge Orchestrator that stems from insufficient control flow management and could lead to...

PT-2025-21064 · Intel · Intel Xeon 6 Processor E-Cores Firmware

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor E-Cores firmware affected versions not specified Description: The issue is related to insufficient control flow management in the Alias Checking Trusted Module. This may allow a privileged user to potentially enable...

Security Bulletin: Vulnerability in requests affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-35195].

Summary The requests package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2024-35195. Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local authenticated attacker to bypass security...

The vulnerability of Xen hypervisors relates to the incorrect sequence of processor instructions, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Xen hypervisors is related to an incorrect sequence of processor instructions, due to the absence of the ENDBR instruction and a prologue/eepilog for CFI schemes based on hash. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access ...

On the Consistency of GNN Explanations for Malware Detection

Control Flow Graphs CFGs are critical for analyzing program execution and characterizing malware behavior. With the growing adoption of Graph Neural Networks GNNs, CFG-based representations have proven highly effective for malware detection. This study proposes a novel framework that dynamically...

Always-Incorrect Control Flow Implementation

Overview Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation in the fixRequestBody function. An attacker can cause writeBody to be called multiple times, leading to unexpected behavior. Remediation A fix was pushed into the master branch but not yet...

CVE-2024-54809

Netgear Inc WNR854T 1.5.2 North America contains a stack-based buffer overflow vulnerability in the parsestheader function due to use of a request header parameter in a strncpy where size is determined based on the input specified. By sending a specially crafted packet, an attacker can take contr...

The vulnerability in the kernel driver drivers/pinctrl/qcom/pinctrl-x1e80100.c of the Linux operating system allows a attacker to cause a service failure.

The vulnerability in the drivers/pinctrl/qcom/pinctrl-x1e80100.c kernel driver of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-54809

Netgear Inc WNR854T 1.5.2 North America contains a stack-based buffer overflow vulnerability in the parsestheader function due to use of a request header parameter in a strncpy where size is determined based on the input specified. By sending a specially crafted packet, an attacker can take contr...

CVE-2024-54809

Netgear Inc WNR854T 1.5.2 North America contains a stack-based buffer overflow vulnerability in the parsestheader function due to use of a request header parameter in a strncpy where size is determined based on the input specified. By sending a specially crafted packet, an attacker can take contr...

Linux Distros Unpatched Vulnerability : CVE-2022-23457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation o...

Linux Distros Unpatched Vulnerability : CVE-2023-46841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Recent x86 CPUs offer functionality named Control-flow Enforcement Technology CET. A sub-feature of this are Shadow Stacks CET-SS. CET-SS is a hardware feature...

Linux Distros Unpatched Vulnerability : CVE-2018-19655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow in the findgreen function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to...

Insufficient Control Flow Management

Vyper is vulnerable to Insufficient Control Flow Management. The vulnerability is due to improper handling of iterator expressions in for loops due to the ability of iterators to consume side effects produced in the loop body, potentially leading to unexpected program behavior...