5918 matches found
CVE-2025-22889
Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-22853
Improper synchronization in the firmware for some IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-22392
Out-of-bounds read in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via network access...
CVE-2025-22392
The CVE-2025-22392 issue is a firmware-level out-of-bounds read affecting Intel AMT and Intel Standard Manageability. A privileged user could enable information disclosure over a network. Documented affected families include Intel CSME/SPS/AMT and various Intel chipsets/CPU generations; root caus...
CVE-2025-22392
Out-of-bounds read in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via network access...
CVE-2025-21096
CVE-2025-21096 involves the Intel® TDX firmware and is caused by improper buffer restrictions in the firmware. This vulnerability could allow a privileged, local attacker to escalate privileges. Intel’s advisory (Intel SA-01312) references CVE-2025-21096 among related TDX issues and recommends up...
CVE-2025-21096
Improper buffer restrictions in the firmware for some IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20077
CVE-2025-20077 concerns a missing release of memory after the effective lifetime in the UEFI OobRasMmbiHandlerDriver module on some Intel® reference server platforms. Intel’s advisory (INTEL-SA-01300) states this could allow a privileged user to cause a denial of service via local access. The iss...
CVE-2025-20067
Observable timing discrepancy in firmware for some IntelR CSME and IntelR SPS may allow a privileged user to potentially enable information disclosure via local access...
CVE-2025-20037
Intel’s advisory (INTEL-SA-01280) confirms CVE-2025-20037 as a TOCTOU race condition in firmware affecting CSME, SPS, AMT, and related Intel firmware. The flaw permits a local, privileged escalation (attack vector: local, requires high privileges; UI: none) with high impact on integrity and avail...
CVE-2025-42950
SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...
CVE-2025-42950 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)
SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...
PT-2025-32887
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8 Description: IBM WebSphere Application Server Liberty is susceptible to stored cross-site scripting. A privileged user can embed arbitrary JavaScript code into the We...
IBM WebSphere Application Server Liberty 跨站脚本漏洞
IBM WebSphere Application Server Liberty is a lightweight Java application server from IBM for rapid development and deployment of cloud-native applications. A stored cross-site scripting XSS vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8, whic...
PT-2025-32713
Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR Standard Manageability affected versions not specified Description: An out-of-bounds read issue exists in the firmware for some IntelR AMT and IntelR Standard Manageability. A privileged user may be able to enable...
PT-2025-32722 · Intel · Intel E810 Ethernet
Name of the Vulnerable Software and Affected Versions: IntelR E810 Ethernet versions prior to 4.6 Description: Improper input validation in the firmware may allow a privileged user to enable a denial of service via local access. Recommendations: Update the firmware to version 4.6 or later...
PT-2025-32683 · Servicenow · Servicenow
Name of the Vulnerable Software and Affected Versions: ServiceNow affected versions not specified Description: A Broken Access Control vulnerability was identified in the ServiceNow AI Platform. This vulnerability could allow a low privileged user to bypass access controls and perform actions...
Linux Distros Unpatched Vulnerability : CVE-2021-3679
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a...
CVE-2025-51308
In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...