CVE-2023-53998 hwrng: virtio - Fix race on data_avail and actual data

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device kicks off a new entropy request whenever the data available reaches zero. When a new request occurs at the end of a read operation, that is, when the...

PT-2025-52955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the virtio random number generator rng device when handling entropy requests and data availability. Specifically, the issue occurs when a new request is...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition between dataavail and actual data, which could lead to the reading of outdated data...

Apache Guacamole Unvalidated Array Indexing

The vulnerability of Apache Guacamole, a software for remote administration of client machines, is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

WebRTC Component Compromise Data Compromise

The vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

Linux Kernel GPIO Driver Buffer Overflow

The vulnerability in the driver/gpio/gpio-wcd934x.c driver for Linux kernel’s GPIO support is related to an incorrect bit shifting of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux SMB2ops Buffer Overflow DoS

The vulnerability of the fs/smb/client/smb2ops.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux net/appletalk/aarp.c Component Data Compromise

The vulnerability of the net/appletalk/aarp.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux sctp_v6_from_sk Heap Buffer Overflow DoS

The vulnerability of the sctpv6fromsk function in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

f2fs Kernel Data Compromise

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel IPv6 DoS

The vulnerability of the Linux operating system’s IPv6 kernel component relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-52539

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

Tenda CH22 Router fromPptpUserSetting() Data Compromise

The vulnerability of the fromPptpUserSetting function in the Tenda CH22 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the delno parameter. Exploiting this vulnerability can allow an attacker to compromise the...

FTP Server Rumpus Validation

The vulnerability of FTP servers for managing Rumpus files is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

OpenID Connect Authorization Data Compromise

The vulnerability of the tools for working with the OpenID Connect protocol is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-52539

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

Apeman ID71 IP camera Data Compromise

The vulnerability of the Apeman ID71 IP camera’s microprogramming software is related to the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-65029: Improper Authorization

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference IDOR vulnerability allows any authenticated user to delete arbitrary participants from polls without ownership verification. The endpoint relies solely on a participant ID to...

CVE-2025-41346

Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another user's account, thereby affecting the confidentiality, integrity, and availabili...

CVE-2025-41346 Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another user's account, thereby affecting the confidentiality, integrity, and availabili...