SUSE CVE-2025-23266

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

CVE-2025-7900 Insecure Direct Object Reference in extension "femanager" (femanager)

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0...

Dell AppSync 代码问题漏洞

Dell AppSync is a data backup and recovery management software from Dell. An XML External Entity Reference Improper Restriction vulnerability exists in Dell AppSync version 4.6.0.0, which stems from improper handling of XML external entity parsing. An attacker could exploit this vulnerability to...

Unspecified Vulnerability in Oracle Database Server (CNVD-2025-24075)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Materialized View for Oracle Databas...

Unspecified Vulnerability in Oracle Fusion Middleware (CVE-2025-50064)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

CVE-2025-23270

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and...

CVE-2025-23266

A flaw was found in the NVIDIA Container Toolkit. This vulnerability allows execution of arbitrary code with elevated permissions via improperly secured container initialization hooks. This can potentially lead to privilege escalation, data tampering, information disclosure, and denial of service...

GHSA-VMG3-7V43-9G23 NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

GHSA-67JC-HMVG-Q4C7 NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

AZL-65648 CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

AZL-65651 CVE-2025-23266 affecting package nvidia-container-toolkit for versions less than 1.17.8-1

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

CVE-2025-23267

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2025-23266

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

CVE-2025-23270

CVE-2025-23270 (NVIDIA Jetson Linux) describes a side-channel vulnerability in UEFI Management mode that can be exploited by an unprivileged local attacker to cause exposure of sensitive information, with potential for code execution, data tampering, denial of service, and information disclosure....

CVE-2025-23270

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and...

CVE-2025-23267

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2025-23267

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2025-23267

The CVE-2025-23267 entry concerns the NVIDIA Container Toolkit. A vulnerability in the update-ldcache hook could allow an attacker to cause data tampering and a denial of service via specially crafted container images. Public advisories in connected docs show fixed versions: SUSE notes a fix in t...