The vulnerability of the Object and Environment Tech components of the JD Edwards EnterpriseOne Tools system management resource management solution allows a malicious actor to gain access to read, modify, and delete data.

The vulnerability of the Object and Environment Tech components of the JD Edwards EnterpriseOne Tools system management resource solution is related to authentication errors. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...

The vulnerabilities of Linux operating system’s crypto kernel components allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Linux operating system’s crypto kernel components is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the astra-safepolicy security configuration software lies in the lack of measures to protect input data. This allows attackers to gain access to confidential information, compromise its integrity, and cause service failures.

The vulnerability of the astra-safepolicy security configuration software relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of Intel Microcode processors lies in implementation errors related to security checks for standard elements. This allows attackers to access confidential data and compromise its integrity.

The vulnerability of Intel Microcode processors lies in errors in the implementation of security checks for standard components. Exploiting this vulnerability allows attackers to gain access to confidential data and compromise its integrity...

The vulnerability in the inode.c component of the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerabilities of Linux kernel’s rose components allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Linux kernel’s rose components is related to errors during link counter updates. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the am65-cpsw-nuss component in the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the am65-cpsw-nuss component in the Linux operating system is related to the lack of initialization for resources. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

The vulnerability of the fs/jfs component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fs/jfs component in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the drivers/net/wireless/ath/ath12k component of the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the drivers/net/wireless/ath/ath12k component of the Linux operating system is related to reading data from buffer files beyond the allowed limits. Exploiting this vulnerability allows an attacker to gain access to protected information...

PT-2025-51251

An unauthenticated Broken Function Level Authorization BFLA vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information and execute a full account takeover via a crafted API request...

The vulnerability of the Linux operating system’s kernel driver components allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel driver component is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2025-14540

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userbackgetjson function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract...

CVE-2025-43465

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43522

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access user-sensitive data...

CVE-2025-43513

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to read sensitive location information...

CVE-2025-43521

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access sensitive user data...

CVE-2025-43471

The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43466

An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-14540

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userbackgetjson function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract...