ML-Logger 路径遍历漏洞

ML-Logger is a logger, server and visualization dashboard for machine learning projects by Ge Yang Personal Developer. A path traversal vulnerability exists in ML-Logger acf255bade5be6ad88d90735c8367b28cbe3a743 and prior versions, which stems from a misbehavior of the loghandler function in the...

ML-Logger 安全漏洞

ML-Logger is a logger, server and visualization dashboard for machine learning projects by Ge Yang Personal Developer. A security vulnerability exists in ML-Logger acf255bade5be6ad88d90735c8367b28cbe3a743 and prior versions, which stems from an incorrect manipulation of the parameter data of the...

ALSA-2025:16823 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled CVE-2025-26465 For more...

GO-2025-3971 DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly

DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly...

CVE-2025-47315

Memory corruption while handling repeated memory unmap requests from guest VM...

CVE-2025-27077

Memory corruption while processing message in guest VM...

CVE-2025-27032

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency...

CVE-2025-21476

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

CVE-2025-47315 Use After Free in Automotive Software platform based on QNX

Memory corruption while handling repeated memory unmap requests from guest VM...

CVE-2025-47315

CVE-2025-47315: Memory corruption in Qualcomm chipset virtualization components when handling duplicate memory unmap requests from a guest VM. Affected: Qualcomm chipsets; root cause is repeated unmap handling leading to memory corruption. Impact per the entry: high in confidentiality, integrity,...

CVE-2025-47315 Use After Free in Automotive Software platform based on QNX

Memory corruption while handling repeated memory unmap requests from guest VM...

CVE-2025-27077 Use After Free in Automotive Software platform based on QNX

Memory corruption while processing message in guest VM...

CVE-2025-27077

CVE-2025-27077 pertains to memory corruption in Qualcomm chipsets when processing messages in a guest VM. The vulnerability affects the guest/VMM interaction, with the underlying cause described as memory corruption during message handling inside the VM. CVSS 3.1 vector indicates Local attack vec...

CVE-2025-27077 Use After Free in Automotive Software platform based on QNX

Memory corruption while processing message in guest VM...

CVE-2025-27032 Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency...

CVE-2025-27032 Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency...

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

CVE-2025-21476

CVE-2025-21476 concerns memory corruption when passing parameters to the Trusted Virtual Machine during the handshake on Qualcomm chipsets. The vulnerability is characterized by a Local attack with Low complexity, Low privileges required, no user interaction, and a high impact on Confidentiality,...

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a stack buffer overflow vulnerability that originates from improperly restricted memory buffer operations and can be exploited by an attacker to...