The vulnerability of the maskedPaths function in the runc tool for running isolated containers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the maskedPaths function in the runc tool for running isolated containers is related to the state of the race condition, which allows for the tracking of references. Exploiting this vulnerability could enable a perpetrator to compromise the confidentiality, integrity, and...

CVE-2025-65001

CVE-2025-65001 affects Fujitsu fbiosdrv.sys prior to version 2.5.0.0. The CIRCL/NVD/Red Hat and other records describe a local, high-privilege attacker exploiting a buffer/input validation flaw in fbiosdrv.sys that could compromise confidentiality, integrity, and availability. Affected component:...

The vulnerability of the PageInfo component in browsers such as Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the PageInfo component in browsers such as Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the runc command, a tool for starting isolated containers, is related to the state of the race condition. Enabling link tracing allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the runc command, used to execute isolated containers, is related to the state of the race condition that allows for the tracking of references. Exploiting this vulnerability could enable a hacker to compromise the confidentiality, integrity, and accessibility of the protecte...

CVE-2025-65001

Fujitsu fbiosdrv.sys before 2.5.0.0 allows an attacker to potentially affect system confidentiality, integrity, and availability...

Fujitsu BIOS Driver 缓冲区错误漏洞

Fujitsu BIOS Driver is a system driver from Fujitsu Japan. A buffer error vulnerability exists in Fujitsu BIOS Driver versions prior to 2.5.0.0, which stems from a lack of sufficient validation of inputs, and could allow an attacker to compromise the confidentiality, integrity, and availability o...

EUVD-2025-97090

Malicious code in kiki-kue73-breki npm...

CVE-2025-32449

Unquoted search path for some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-24918

Improper link resolution before file access 'link following' for some IntelR Server Configuration Utility software and IntelR Server Firmware Update Utility software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an...

CVE-2025-35972

Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2025-32091

Incorrect default permissions in some firmware for the IntelR ArcTM B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2025-24848

Protection mechanism failure for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-20056

Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may...

kernel: ima: Fix potential memory leak in ima_init_crypto()

In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in imainitcrypto On failure to allocate the SHA1 tfm, IMA fails to initialize and exits without freeing the imaalgoarray. Add the missing kfree for imaalgoarray to avoid the potential memory leak...

EUVD-2025-60980

SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the attacker. This has low impact on confidentiality and integrity of the application with no impact on availability...

EUVD-2025-60992

Due to a Reflected Cross-Site Scripting XSS vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input is processed during web page generation, resulting in...

EUVD-2025-60988

SQL Anywhere Monitor Non-GUI baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system...

EUVD-2025-60995

Migration Workbench DX Workbench in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low...

CVE-2025-42893

Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site displayed within an embedded frame. Successful exploitation could allow the attacker to steal...