The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

The vulnerability of the get_details() function in the POST SMTP plugin of the WordPress content management system allows a hacker to escalate their privileges and disclose sensitive information.

The vulnerability of the getdetails function in the POST SMTP Mailer plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges and disclose sensitive...

The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

NVIDIA GPU Display Driver 安全漏洞

NVIDIA GPU Display Driver is a display driver from NVIDIA. The NVIDIA GPU Display Driver contains a security vulnerability that can be exploited by attackers to potentially cause elevation of privilege, code execution, information disclosure, denial of service, or data manipulation...

Cursor 代码问题漏洞

Cursor is an AI code editor open-sourced by Cursor. A code issue vulnerability exists in Cursor versions prior to 1.3 that stems from Mermaid allowing embedded images, which could lead to the disclosure of sensitive information...

Code-Projects Restaurant Order System 安全漏洞

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. A security vulnerability exists in Code-Projects Restaurant Order System version 1.0, which originates from a SQL injection vulnerability in the payment.php file, which may lead to the disclosure o...

CVE-2025-8426

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...

ROS-20250731-04

A vulnerability in the Alerts & IRM service of the Grafana monitoring and surveillance platform is related to Insufficient protection of service data when connected to a DingDing contact point. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected...

UBUNTU-CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information...

Debian dsa-5968 : chromium - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5968 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5968-1 [email protected] https://www.debian.org/security/ Andres...

The vulnerability of the Broker VM component in the Cortex XDR security platform, related to improper protection of the alternative path, allows a perpetrator to disclose protected information.

The vulnerability of the Broker VM component in the Cortex XDR security platform is related to improper protection of the alternative path. Exploiting this vulnerability can allow an attacker to disclose protected information...

Integer Overflow Vulnerability in Multiple VMWare Products

VMWare ESXi and others are products of VMWare, Inc. VMWare ESXi is an enterprise-grade Type-1 hypervisor developed by VMWare, Inc. that can be installed and run directly on physical server hardware without relying on the underlying operating system for efficient creation and management of virtual...

Silicon Labs Zigbee EmberZNet SDK 安全漏洞

Silicon Labs Zigbee EmberZNet SDK is a software development kit for developing Zigbee networks from Silicon Labs, Inc. A security vulnerability exists in the Silicon Labs Zigbee EmberZNet SDK that stems from improper handling of buffer management API error states, which could lead to a data...

CVE-2025-43265

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app...

CVE-2025-43265

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose internal states of the app...

[R1] Tenable Patch Management Fixes One Vulnerability

R1 Tenable Patch Management Fixes One Vulnerability Arnie Cabral Tue, 07/29/2025 - 09:34 A SQL injection vulnerability exists in Tenable Patch Management versions prior to 9.3.968.19 due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject ...

DEBIAN-CVE-2025-7458

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...

CVE-2025-7458

CVE-2025-7458 is confirmed in connected documents with concrete details: SQLite versions 3.39.2–3.41.1 contain an integer overflow in sqlite3KeyInfoFromExprList that can enable DoS or memory disclosure via a crafted ORDER BY with many expressions. IBM’s bulletin lists IBM Watson Cartridge impact ...

PT-2025-31353

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.6 visionOS versions prior to 2.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 tvOS versions prior to 18.6 Description An out-of-bounds read issue was addressed throu...