CVE-2025-3440 IBM Security Guardium cross-site scripting

IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-4648

Download of Code Without Integrity Check vulnerability in Centreon web allows Reflected XSS. A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from...

CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...

CVE-2025-21100

Improper initialization in the UEFI firmware for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20032

Improper input validation for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access...

CVE-2025-24308

Improper input validation in the UEFI firmware error handler for the IntelR Server D50DNP and M50FCP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-21100

CVE-2025-21100 corresponds to an Intel firmware issue on Intel Server Board D50DNP and M50FCP where improper initialization in the UEFI firmware can allow a privileged local user to disclose information. Related Intel advisory INTEL-SA-01269 documents multiple CVEs for the same platforms, includi...

CVE-2025-21100

Improper initialization in the UEFI firmware for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20032

Improper input validation for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access...

CVE-2025-20032

CVE-2025-20032 affects Intel® PROSet/Wireless WiFi Software for Windows prior to version 23.100. The vulnerability stems from improper input validation, which may allow a privileged user with local access to cause a denial of service. Affected products listed in connected materials include Intel®...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20009

The Intel advisory INTEL-SA-01269 documents CVE-2025-20009 (and related CVEs) affecting Intel Server Board D50DNP and M50FCP. It describes improper input validation in the UEFI firmware GenerationSetup module that could allow a privileged user to disclose information via local access. A remediati...

CVE-2025-20009

Improper input validation in the UEFI firmware GenerationSetup module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

microcode_ctl: Improper input validation in UEFI firmware

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

kernel: octeontx2-af: Add validation before accessing cgx and lmac

A bounds-checking error was found in the Linux kernel Marvell OcteonTX2 network driver's initialization code. On systems with newer CN10K RPM or CN10KB RPMUSX hardware, a local user with privileges to initialize the driver can trigger driver probe, causing the driver to make incorrect assumptions...

CVE-2025-35471 conda-forge openssl-feedstock writable OPENSSLDIR

conda-forge openssl-feedstock before 066e83c 2024-05-20, on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary co...

CVE-2025-42997

CVE-2025-42997 affects SAP Gateway Client. Description: information disclosure vulnerability where a high-privileged user can access restricted data beyond the application’s scope, caused by improper privilege management and data exposure that may yield low impact to confidentiality, integrity, a...

CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

PT-2025-21108 · Intel · Intel Server M50Fcp +1

Name of the Vulnerable Software and Affected Versions: IntelR Server D50DNP and M50FCP boards affected versions not specified Description: The issue is related to improper initialization in the UEFI firmware, which may allow a privileged user to potentially enable information disclosure via local...