78 matches found
CVE-2018-4379
A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1...
CVE-2025-47357
CVE-2025-47357 describes an information-disclosure vulnerability in Qualcomm chipsets where a user-level driver can perform QFPROM read or write operations on fuse regions. The root cause is consistently described as an access-control/authorization issue that allows local (user-level) operations ...
SUSE CVE-2025-40023
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs can't read BMGPCIECAP0x138340 register nor access PCODE already guarded by the info.skippcode flag so we shouldn't expose attributes that require any of them to...
EUVD-2016-7721
Malware in sbrugna...
EUVD-2018-16174
Malware in sbrugna...
EUVD-2025-28327
Malicious code in bioql PyPI...
EUVD-2024-39315
Malicious code in bioql PyPI...
EUVD-2023-55021
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-21894
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: enetc: VFs do not support HWTSTAMPTXONESTEPSYNC Actually ENETC VFs do not support HWTSTAMPTXONESTEPSYNC because only ENETC PF can access PMaSINGLESTEP...
CVE-2025-42974
CVE-2025-42974 involves SAP NetWeaver/ABAP Platform (SDCCN) with a missing authorization check that allows an authenticated non-administrative user to call a remote-enabled function module. The resulting exposure is limited to confidentiality (low impact); there is no reported impact on integrity...
CVE-2025-42968
CVE-2025-42968 affects SAP NetWeaver. An authenticated non-administrative user can invoke a remote-enabled function module (RFC) and access information about the SAP system and OS that is not sensitive, with low impact on confidentiality and no impact on integrity or availability. The root cause ...
PT-2025-28292 · Sap Se · Sap Netweaver/Abap Platform
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is due to a missing authorization check, allowing an attacker authenticated as a non-administrative user to call a remote-enabled function module. This could enable access to...
PT-2025-27360
Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6 Description: A null pointer dereference issue was found in the function H5C flush single entry of the file src/H5Centry.c. The manipulation leads to this issue, and the attack needs to be approached locally. Recommendation...
CVE-2025-5192
Affected software: Soar Cloud HRD Human Resource Management System (client application) up to version 7.3.2025.0408. Vulnerability: Missing authentication for a critical function, allowing remote attackers to bypass authentication and access application functions. Root cause / details: Described ...
CVE-2024-43272
Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...
PT-2025-18676 · Tenda · Tenda W20E
Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6 Description: A command injection issue was discovered in the formSetDebugCfg function via the module parameter. This issue allows attackers to execute arbitrary commands through a manipulated request...
PT-2025-18356 · NetGear · Netgear Ex6200
Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical issue has been discovered, affecting the function sub 54014. The manipulation of the argument host leads to a buffer overflow. This issue can be exploited remotely. The vendor was...
PT-2025-18150 · Code Projects · Code-Projects Clothing Store Management System
Name of the Vulnerable Software and Affected Versions: code-projects Clothing Store Management System version 1.0 Description: A critical vulnerability was found in the code-projects Clothing Store Management System. The issue affects the add item function, where manipulation of the st.productnam...
PT-2025-22292 · Unknown · Fw-Wgs-804Hpt
Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the stp conf name parameter in the web stp globalSetting post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, as a temporary...