CVE-2025-27083

CVE-2025-27083 : Authenticated command injection in HPE AOS web-based management interfaces (AOS-10 GW and AOS-8 Controller/Mobility Conductor). The issue allows an authenticated attacker to execute arbitrary commands with elevated privileges on the underlying OS. Affected software/versions are A...

Siemens License Server（SLS） 信任管理问题漏洞

Siemens License Server SLS is a tool for managing and distributing licenses for Siemens software products from Siemens AG, Germany. A trust management issue vulnerability exists in Siemens License Server SLS versions prior to V4.3 that stems from not properly restricting user privileges, which...

CVE-2025-0050

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations,...

PT-2025-15892 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.0 Description: The issue is related to a use of default password vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to the...

CVE-2025-25178

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption...

CVE-2025-0468

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-0468

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

CVE-2025-25178 GPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memory

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory corruption...

CVE-2025-25178

CVE-2025-25178 affects Imagination Technologies’ GPU driver (PowerVR-GPU) where an unprivileged user can trigger improper GPU system calls, leading to kernel memory corruption. The CVE is described as a GPU-driver memory corruption risk from local, low-privilege execution with no user interaction...

CVE-2025-0468

CVE-2025-0468 describes a vulnerability in Imagination Technologies/GPU driver where a non-privileged user can issue improper GPU system calls to subvert GPU hardware, potentially writing to arbitrary physical memory pages. The affected component is the GPU driver stack (PowerVR/GPU DDK lineage) ...

CVE-2025-0468 GPU DDK - ui64RobustnessAddress can overwrite Freelist / HWRT (and bypass PMMETA)

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kern...

PT-2025-14906 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. Under certain circumstances, this...

PT-2025-14872 · Elaborate Bytes Ag · Virtual Clonedrive

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a kernel driver that is accessible to low-privileged users. This driver exposes a function that fails to properly validate the privileges of the calling process, allowing...

CVE-2024-25051

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system...

BIT-ARTIFACTORY-2024-3505

JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration. This does not affect JFrog cloud deployments...

PT-2025-14507 · Ibm · Ibm Jazz Reporting Service

Name of the Vulnerable Software and Affected Versions: IBM Jazz Reporting Service versions 7.0.2 through 7.0.3 Description: The issue allows an authenticated privileged user to impersonate another user on the system because the session is not invalidated after logout. Recommendations: For version...

Zabbix SQL注入漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix that stems from SQL injection in the API service, which could lead to execution of arbitrary SQ...

Splunk Enterprise 9.1.0 < 9.1.8, 9.2.0 < 9.2.5, 9.3.0 < 9.3.3 (SVD-2025-0301)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0301 advisory. - In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.104,...

CVE-2025-20233

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...

CVE-2025-20226

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.111, and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could run a saved search with a risky command using the permission...