CVE-2024-57708

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, proto, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability...

CVE-2025-41647

CVE-2025-41647 affects Lenze PLC Designer V4. A local, low-privilege attacker can learn the password of the connected controller because the software incorrectly displays the password in plaintext under special conditions. The vulnerability is documented across multiple sources (NVD/Red Hat/CVE r...

kernel: ndisc: use RCU protection in ndisc_alloc_skb()

A vulnerability was found in the Linux kernel's IPv6 Neighbor Discovery NDISC subsystem, which manages network neighbor information. The issue arises from improper synchronization mechanisms when allocating socket buffers skbuff in the ndiscallocskb function. Specifically, the function can be...

kernel: Kernel: Denial of Service via memory leak in SMB client

A flaw was found in the Linux kernel's Server Message Block SMB client. A local attacker with low privileges could exploit a memory leak in the cifssmb3domount function. This could lead to a Denial of Service DoS due to resource exhaustion...

CVE-2024-57708

The CVE-2024-57708 entry concerns OneTrust SDK v6.33.0 with a reported vulnerability described as prototype pollution via Object.setPrototypeOf, proto , and Object.assign, potentially enabling Denial of Service. Multiple connected sources (Red Hat advisory, CVE listing, packetstorm/exploit-db syn...

CVE-2024-57708

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, proto, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability...

CVE-2024-57708

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, proto, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability...

PT-2025-26840 · Onetrust · Onetrust Sdk

Name of the Vulnerable Software and Affected Versions: OneTrust SDK version 6.33.0 Description: The issue allows a local attacker to cause a denial of service via the Object.setPrototypeOf, proto , and Object.assign components. Recommendations: For OneTrust SDK version 6.33.0, consider disabling...

CVE-2025-39201

A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service...

CVE-2025-39201

A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service...

CVE-2025-39201

CVE-2025-39201 refers to vulnerabilities in Hitachi Energy’s MicroSCADA X SYS600 affecting multiple subsystems (mailslot, monitors/logs, TLS certificate validation, and crafted IEC 61850 messages). Public sources (ICS advisories) indicate: a local access requirement can allow a local attacker to ...

kernel: ndisc: use RCU protection in ndisc_alloc_skb()

A vulnerability was found in the Linux kernel's IPv6 Neighbor Discovery NDISC subsystem, which manages network neighbor information. The issue arises from improper synchronization mechanisms when allocating socket buffers skbuff in the ndiscallocskb function. Specifically, the function can be...

kernel: ndisc: use RCU protection in ndisc_alloc_skb()

A vulnerability was found in the Linux kernel's IPv6 Neighbor Discovery NDISC subsystem, which manages network neighbor information. The issue arises from improper synchronization mechanisms when allocating socket buffers skbuff in the ndiscallocskb function. Specifically, the function can be...

kernel: ndisc: use RCU protection in ndisc_alloc_skb()

A vulnerability was found in the Linux kernel's IPv6 Neighbor Discovery NDISC subsystem, which manages network neighbor information. The issue arises from improper synchronization mechanisms when allocating socket buffers skbuff in the ndiscallocskb function. Specifically, the function can be...

microcode_ctl: From CVEorg collector

A flaw was found in the Branch Prediction Unit BPU of Intel's Lion Core CPUs that make it possible for an attacker to bypass Indirect Branch Predictor Barrier IBPB protections. By employing branch predictor training techniques as described in the "Training Solo" publication, an attacker with loca...

Hitachi MicroSCADA X SYS600 安全漏洞

Hitachi MicroSCADA X SYS600 is a Hitachi MicroSCADA X SYS600 data acquisition and monitoring control system primarily used in power systems. A security vulnerability exists in Hitachi MicroSCADA X SYS600, which can be exploited by an unauthorized local attacker to cause a denial of service by...

K000151924: runc vulnerability CVE-2024-45310

Security Advisory Description runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a...

CVE-2025-46158

An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the setitimer syscall...

CVE-2025-44952

A missing length check in ogspfcpsubnetadd function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dnn field with a value with length greater than 101...

CVE-2025-30642

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...