822 matches found
CVE-2025-64717
ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4, and 4.6.6, a vulnerability in ZITADEL's federation process allowed auto-linking users from external identity providers to existing users in ZITADEL even if the corresponding Id...
CVE-2025-64717
ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4, and 4.6.6, a vulnerability in ZITADEL's federation process allowed auto-linking users from external identity providers to existing users in ZITADEL even if the corresponding Id...
CVE-2025-64717
Summary of CVE-2025-64717 (ZITADEL): A flaw in ZITADEL’s federation/auto-linking during authentication allows linking an external IdP user to an existing internal user when the IdP is deactivated or not permitted for the organization. This can enable an unauthenticated account takeover, unless MF...
CVE-2025-64717 ZITADEL vulnerable to Account Takeover with deactivated Instance IdP
ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4, and 4.6.6, a vulnerability in ZITADEL's federation process allowed auto-linking users from external identity providers to existing users in ZITADEL even if the corresponding Id...
CVE-2025-64717 ZITADEL vulnerable to Account Takeover with deactivated Instance IdP
ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4, and 4.6.6, a vulnerability in ZITADEL's federation process allowed auto-linking users from external identity providers to existing users in ZITADEL even if the corresponding Id...
CVE-2025-64402
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "OLE objects" linked to...
CVE-2025-60714
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally...
EUVD-2025-93416
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally...
CVE-2025-60714 Windows OLE Remote Code Execution Vulnerability
...
CVE-2025-60714 Windows OLE Remote Code Execution Vulnerability
...
PT-2025-46475
Name of the Vulnerable Software and Affected Versions Windows OLE affected versions not specified Description A heap-based buffer overflow exists in Windows OLE. This flaw could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows OLE. An attacker exploiting this vulnerability could execute code. The following products and editions are affected:Windows 10 Version...
MGASA-2025-0262 Updated binutils packages fix security vulnerabilities
GNU Binutils format.c bfdsetformat memory corruption. CVE-2025-1153 GNU Binutils ld elflink.c bfdelfgcmarkrsec heap-based overflow. CVE-2025-1176 GNU Binutils ld libbfd.c bfdputl64 memory corruption. CVE-2025-1178 GNU Binutils ld elflink.c bfdelfgcmarkrsec memory corruption. CVE-2025-1181 GNU...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: smb/server: Avoid deadlock when linking with “ReplaceIfExists”. If the smb2createlink function is called with “ReplaceIfExists” set, and the file name actually exists, a deadlock will occur. The function ksmbdvfskernpathlocked wi...
The vulnerability of the OLE Document File Allocation Table Parser component of the text extraction software, which can read text from MS-Word catdoc files, allows a hacker to execute arbitrary code.
The vulnerability of the OLE Document File Allocation Table Parser component of the MS-Word catdoc file extraction tool is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2025-61783
A flaw was found in Python Social Auth, a social authentication and registration framework. During authentication, a user account could be incorrectly associated by e-mail even when the associatebyemail pipeline was not explicitly enabled. This behavior could allow account takeover if a third-par...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the elfx8664relocatesection function. An attacker can cause a heap-based buffer overflow by providing specially crafted input files during the linking process. Remediation A fix was pushed into the master...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the bfdelfgcrecordvtentry function. An attacker can cause a denial of service by providing specially crafted input files that trigger an out-of-bounds read during the linking process. Remediation A fix was pushed...
CVE-2025-11413
A vulnerability was found in GNU Binutils 2.45. Affected is the function elflinkaddobjectsymbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used...