CVE-2023-20507

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity...

The vulnerability of the Oracle Financial Services Behavior Detection Platform component in the bank analytics system’s simulation model for Oracle Financial Services Applications allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Oracle Financial Services Behavior Detection Platform component in the bank analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of...

CVE-2024-21088

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite component: Import Utility. Supported versions that are affected are 12.2.4-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Production...

The vulnerability of the ScadaServer/ScadaServer/ScadaServerEngine/MainLogic.cs file in the SCADA system for developing automation control systems. This vulnerability allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the ScadaServer/ScadaServer/ScadaServerEngine/MainLogic.cs file in SCADA systems for the development of automation systems is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected informatio...

The vulnerability of the udmabuf_vm_fault() function in the udmabuf driver (drivers/dma-buf/udmabuf.c) in Linux kernel allows a attacker to compromise data integrity or cause service failures.

The vulnerability of the udmabufvmfault function in the udmabuf driver drivers/dma-buf/udmabuf.c in Linux operating systems is related to a flaw in the counting of the number of references to pages stored in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity ...

CVE-2025-21364 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2024-12397

A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorize...

PT-2025-3039 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 watchOS versions prior to 11.2 tvOS versions prior to 18.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to a memory reading problem beyond the allowed range in the...

The software used for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is vulnerable. This vulnerability allows attackers to compromise data integrity.

The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to errors in processing symbolic links. Exploiting this vulnerability can allow an attacker to compromise data integrity...

PT-2024-18218 · Amazon · Amazon S3

Name of the Vulnerable Software and Affected Versions: Amazon S3 affected versions not specified Description: The issue concerns an unclaimed Amazon S3 bucket, 'codeconf', referenced in an audio file link within a documentation file. This bucket has been claimed by an external party, which could...

PT-2024-7787 · Veeam · Veeam Backup Enterprise Manager

Name of the Vulnerable Software and Affected Versions: Veeam Backup Enterprise Manager affected versions not specified Description: A vulnerability in Veeam Backup Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform a...

The vulnerability of the formSetWAN_Wizard51() and formSetWAN_Wizard52() functions in the D-Link DIR-605L router software allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWANWizard51 and formSetWANWizard52 functions in the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2024-45219 Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances. Due to missing validation checks for KVM-compatible templates or volumes in CloudStack 4.0.0 through 4.18.2....

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its ability to download files of a dangerous type without limit, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the MX-ONE Provisioning Manager tool, a corporate communication platform from Mitel MiVoice, allows a perpetrator to bypass authentication procedures and compromise the integrity of the protected information.

The vulnerability of the MX-ONE Provisioning Manager PM tool, a component of the corporate communication platform Mitel MiVoice MX-ONE, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass authentication procedures and compromise the...

kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory

A flaw was found in hw in the SNP-SEV firmware. This flaw could allow a privileged attacker to corrupt a guest's private memory, potentially resulting in the loss of data integrity of the guest...

kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory

A flaw was found in hw in the SNP-SEV firmware. This flaw could allow a privileged attacker to corrupt a guest's private memory, potentially resulting in the loss of data integrity of the guest...

The vulnerability of the H5HG__cache_heap_deserialize() function in the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5HGcacheheapdeserialize function in the HDF5 library is related to buffer overflow in the heap. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Shadow account management tool lies in the insufficient neutralization of certain elements in the query, allowing a malicious actor to compromise data integrity.

The vulnerability of the Shadow account management tool is related to insufficient neutralization of certain elements in the query. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insufficient input data validation, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...