9559 matches found
ROS-20251223-7322
A vulnerability in the urllib.parse.urlsplit and urlparse functions of the Python programming language interpreter is related to insufficient validation of incoming requests. Exploitation of the vulnerability could allow an attacker acting remotely to affect data integrity...
ROS-20251223-7324
A vulnerability in the urllib.parse.urlsplit and urlparse functions of the Python programming language interpreter is related to insufficient validation of incoming requests. Exploitation of the vulnerability could allow an attacker acting remotely to affect data integrity...
CVE-2025-14762
A flaw was found in the AWS SDK for Ruby, an open-source client-side encryption library. A user with write access to an S3 Simple Storage Service bucket can exploit a missing cryptographic key commitment. This allows the introduction of a new Encrypted Data Key EDK that decrypts to different...
libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend
A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with th...
Use of a Broken or Risky Cryptographic Algorithm
Overview Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm when storing encrypted data keys in an instruction file. An attacker with write access to the S3 bucket can manipulate encrypted data keys to cause decryption to unintended plaintext by...
libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend
A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with th...
CVE-2025-9612
An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on Transaction Layer Packet TLP ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical...
kernel: wifi: cfg80211: fix use-after-free in cmp_bss()
A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...
USN-7934-1: Linux kernel (Azure) vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux...
The vulnerability of the fs/btrfs component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.
The vulnerability of the fs/btrfs kernel component in the Linux operating system relates to operations involving resources after their expiration or release. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...
The vulnerability of the appletalk component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.
The vulnerability of the appletalk component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...
The vulnerability in the sound/soc/soc-core.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the sound/soc/soc-core.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer boundaries of memory, allows an attacker to compromise data integrity and cause service failures.
The vulnerability of the Linux operating system’s kernel is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability allows an attacker to compromise the integrity of data and also cause service failures due to the corrupted image file...
The vulnerability of the smb component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.
The vulnerability of the smb component in the Linux operating system’s kernel is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...
The vulnerability of the scsi/bfa/bfad_im.c component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.
The vulnerability of the scsi/bfa/bfadim.c component of the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...
Building Trustworthy AI Agents
The promise of personal AI assistants rests on a dangerous assumption: that we can trust systems we haven’t made trustworthy. We can’t. And today’s versions are failing us in predictable ways: pushing us to do things against our own best interests, gaslighting us with doubt about things we are or...
The vulnerability of the Apache HTTP Server’s web server lies in its failure to take measures to neutralize specific control elements, allowing attackers to influence the confidentiality and integrity of the protected information.
The vulnerability of the Apache HTTP Server is related to the lack of measures taken to neutralize specific control elements. Exploiting this vulnerability allows a remote attacker to influence the confidentiality and integrity of the protected information...
EUVD-2025-202720
pgAdmin versions up to 9.10 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...
EUVD-2025-202412
Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...
Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-3056248)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from improper input validation, and can be exploited by an attacker to cause impact on...