CVE-2025-27460

The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker. This allows an attacker with physical access to the device to use an alternative operating system to interact with the hard drives, completely circumventing the Windows login. The attacker ca...

Google Ordered to Pay $314M for Misusing Android Users' Cellular Data Without Permission

Google has been ordered by a court in the U.S. state of California to pay $314 million over charges that it misused Android device users' cellular data when they were idle to passively send information to the company. The verdict marks an end to a legal class-action complaint that was originally...

PT-2025-29165

Name of the Vulnerable Software and Affected Versions Tenda O3V2 version 1.0.0.123880 Description A critical issue exists in Tenda O3V2 version 1.0.0.123880. The fromNetToolGet function within the /goform/setPingInfo file of the httpd component is susceptible to operating system command injection...

Linux DRM DoS

The vulnerability of the DRM/amd/display components in the Linux operating system is related to the lack of zero-division checking. Exploiting this vulnerability can allow a perpetrator to cause service failures...

D-Link DI-7300G+ Command Injection Vulnerability

The D-Link DI-7300G+ is a ruggedized, enterprise-grade smart gateway from China-based D-Link. The D-Link DI-7300G+ suffers from a command injection vulnerability that is caused by a flaw in httpddebug.asp. An attacker can exploit this vulnerability to execute arbitrary operating system commands o...

Scriptcase Operating System Command Injection Vulnerability

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. An operating system command injection vulnerability exists in Scriptcase version 9.12.006, which stems from a command injection in the SSH connection settings that could lead to system command execution...

Linux ondemand.c DoS

The vulnerability of the ondemand.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux dml2_dc_resource_mgmt.c DoS

The vulnerability of the dml2dcresourcemgmt.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux ondemand.c DoS

The vulnerability of the ondemand.c component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Mellanox mlx5 DoS

The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38113

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

CVE-2025-38098

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in createvalidatestreamforsink Don't try to operate on a drmwbconnector as an amdgpudmconnector. While dereferencing aconnector-base will "work" it's wrong and might lead to...

Linux megaraid_sas_base Heap Buffer Overflow DoS

The vulnerability of the megaraidsasbase.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

UFS driver DoS

The vulnerability of the UFS driver in the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/regulator/rtq2208-regulator.c DoS

The vulnerability of the drivers/regulator/rtq2208-regulator.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux gf100.c DoS

The vulnerability of the gf100.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux smc_core.c DoS

The vulnerability of the smccore.c component in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

fs/btrfs Btrfs DoS

The vulnerability of the fs/btrfs component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux ufs-qcom.c DoS

The vulnerability of the ufs-qcom.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

arch/x86 kernel Data Compromise

The vulnerability of the arch/x86 kernel component of the Linux operating system is related to the exposure of information through mismatches. Exploiting this vulnerability can allow an attacker to gain access to confidential data...