Adobe After Effects < 24.6.8 / 25.0 < 25.4 Multiple Memory exposure (APSB25-86) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 24.6.8, 25.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-86 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory exposure CVE-2025-54239, CVE-2025-54240,...

Adobe After Effects < 24.6.8 / 25.0 < 25.4 Multiple Memory exposure (APSB25-86)

The version of Adobe After Effects installed on the remote Windows host is prior to 24.6.8, 25.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-86 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory exposure CVE-2025-54239, CVE-2025-54240,...

APSB25-86 : Security update available for Adobe After Effects

Adobe has released an update for Adobe After Effects for Windows and macOS. This update addresses important security vulnerabilities. Successful exploitation could lead to memory exposure...

PT-2025-36382

Name of the Vulnerable Software and Affected Versions: versions prior to 12.0 Hotfix 91155 Description: Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory, resulting in a loss of integrity. Recommendations: At the moment, there is no...

CVE-2025-51643

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...

webp crate may expose memory contents when encoding an image

Affected versions of this crate did not check that the input slice passed to "webp::Encoder::encode is large enough for the specified image dimensions. If the input slice is too short, the library will read out of bounds of the buffer and encode other memory contents as an image, resulting in...

GHSA-9Q78-27F3-2JMH webp crate may expose memory contents when encoding an image

Affected versions of this crate did not check that the input slice passed to "webp::Encoder::encode is large enough for the specified image dimensions. If the input slice is too short, the library will read out of bounds of the buffer and encode other memory contents as an image, resulting in...

Linux Distros Unpatched Vulnerability : CVE-2016-5243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tipcnlcompatlinkdump function in net/tipc/netlinkcompat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local user...

CVE-2025-1759

IBM Concert Software versions 1.0.0–1.1.0 are affected by CVE-2025-1759, a vulnerability that could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory. The issue is confirmed across multiple sources, with IBM’s advisory recommendi...

CVE-2025-38523

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...

IBM Concert Software 安全漏洞

IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software suffers from an improper heap memory cleanup vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2018-6159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information fr...

DEBIAN-CVE-2025-38523

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...

UBUNTU-CVE-2025-38523

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...

CVE-2025-38523 cifs: Fix the smbd_response slab to allow usercopy

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...

CVE-2025-38523

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...

CVE-2025-38523 cifs: Fix the smbd_response slab to allow usercopy

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbdresponse slab to allow usercopy The handling of received data in the smbdirect client code involves using copytoiter to copy data from the smbdreponse struct's packet trailer to a folioq buffer provided by...

CVE-2025-54202 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2025-34093

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.3 and earlier Description: Substance3D - Stager is affected by an out-of-bounds read issue that may lead to memory exposure. An attacker could potentially disclose sensitive information by exploiting this...

PT-2025-32615 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP BIC Document affected versions not specified Description: SAP NetWeaver Application Server ABAP BIC Document is susceptible to a crafted request that, when submitted to a BIC Document application, can cau...