20296 matches found
PT-2025-6861 · Ywoa · Ywoa
Name of the Vulnerable Software and Affected Versions: ywoa versions 2024.07.03 and earlier Description: A problematic issue has been found in the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads t...
gcc security update
8.5.0-23.0.1 - Merge Oracle patches to 8.5.0-23. Oracle history: May-22-2024 Qing Zhao 8.5.0-22.0.1 - Merge Oracle patches to 8.5.0-22. Reviewed-by: Jose E. Marchesi March-27-2024 Qing Zhao 8.5.0-21.0.1 - Merge Oracle patches to 8.5.0-21. January-19-2024 Qing Zhao 8.5.0-20.0.3 - Fix Orabug...
Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-54658
A flaw was found in WebKitGTK. Processing malicious web content can cause a denial of service due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK...
CVE-2024-12797
A flaw was found in OpenSSL's RFC7250 Raw Public Key RPK authentication. This vulnerability allows man-in-the-middle MITM attacks via failure to abort TLS/DTLS handshakes when the server's RPK does not match the expected key despite the SSLVERIFYPEER verification mode being set. Mitigation...
CVE-2025-1182
A flaw was found in GNU Binutils. This vulnerability allows memory corruption via manipulation of the bfdelfrelocsymboldeletedp function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ea...
CVE-2025-1181
A flaw was found in GNU Binutil. This vulnerability allows memory corruption via manipulation of the bfdelfgcmarkrsec function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use...
CVE-2025-1179
A flaw was found in GNU Binutils. This vulnerability allows memory corruption via manipulation of the bfdputl64 function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...
CVE-2025-1180
A flaw was found in GNU Binutils. This vulnerability allows memory corruption via manipulation of the bfdelfwritesectionehframe function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ea...
podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile
A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...
NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2025-1178
A flaw was found in GNU Binutils. This vulnerability allows memory corruption via manipulation of the bfdputl64 function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...
CVE-2025-1176
A flaw was found in GNU Binutils. This vulnerability allows a heap-based buffer overflow via the bfdelfgcmarkrsec function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...
Schneider Electric EcoStruxure (Update A)
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
Intel Graphics Software Advisory - Lenovo Support US
No description provided...
PT-2025-6269 · Lexmark · Lexmark Print Management Client
Name of the Vulnerable Software and Affected Versions: Lexmark Print Management Client affected versions not specified Description: A Reliance on Untrusted Inputs in a Security Decision issue has been identified. This allows for potential security risks due to the reliance on untrusted inputs...
PT-2025-18398
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the backlight LED driver. The issue occurs when the led sysfs enable function is called without holding the led access...
AMD GPU Security Vulnerabilities
AMD ID: AMD-SB-6016 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential security vulnerabilities in the Satellite Management Controller SMC in AMD Instinct™ MI300X accelerators were discovered during internal audit/penetration...
Last-Level Cache Attack
AMD ID: AMD-SB-7032 Potential Impact: N/A Severity: N/A Summary Researchers from Wuhan University have provided AMD with a paper titled “ZenLeak: Practical Last-Level Cache Side-Channel Attacks on AMD Zen Processors” in which they discuss prime and probe attacks targeting the Last-Level Cache LLC...
