PT-2025-35670

Name of the Vulnerable Software and Affected Versions TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description An improper input validation issue exists in the TIGERF trustlet, potentially allowing local attackers to access protected data. Recommendations Update to SMR Apr-2023 Releas...

CVE-2023-21478: Undefined Security Weakness

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP (BIC Document) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP BIC Document is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker,...

CVE-2025-43245

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

Vulnerability of the sa_run() function in the drivers/crypto/sa2ul.c module – A driver for the Linux kernel cryptographic accelerator, which allows an attacker to gain access to protected information

Vulnerability of the sarun function in the drivers/crypto/sa2ul.c module – The driver for the Linux kernel cryptographic accelerator is vulnerable to a vulnerability where memory is not properly freed before removing the last reference to memory memory leak. Exploiting this vulnerability could...

Vulnerability of the amd_sfh_work() function in the driver/hid/amd-sfh-hid/amd_sfh_client.c file – a driver for the Linux kernel’s user interface device subsystem, which allows an attacker to access protected information.

Vulnerability of the amdsfhwork function in the driver/hid/amd-sfh-hid/amdsfhclient.c file – The driver for the Linux kernel’s user interface device subsystem is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an...

The vulnerability of the Apache InLong data integration platform, related to deficiencies in the deserialization mechanism, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory. This allows attackers to gain unauthorized access to protected information and circumvent the ASLR protection mechanism.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and bypass the ASLR protection mechanism...

The vulnerability of the LockBufferingSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the LockBufferingSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the DRM/AMD/display components of the Linux operating system allows a perpetrator to influence the accessibility of protected information.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to influence the accessibility of protected information...

The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to gain access to protected information.

The vulnerability of the C/C++ Libstb library lies in the writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to protected information...

CVE-2025-20938: Undefined Security Weakness

Improper access control in SamsungContacts prior to SMR Apr-2025 Release 1 allows local attackers to access protected data in SamsungContacts...

Vulnerability of the path_init() function in the drivers/interconnect/core.c module – The Linux kernel interconnect driver allows a hacker to gain access to protected information or cause service failures.

Vulnerability of the pathinit function in the drivers/interconnect/core.c module – The Linux kernel interconnect driver has vulnerabilities in its code. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

CVE-2025-30461

An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data...

The vulnerability of the i2c_imx_xfer() function in the drivers/i2c/busses/i2c-imx.c module of the Linux kernel allows a hacker to gain access to protected information.

The vulnerability of the i2cimxxfer function in the drivers/i2c/busses/i2c-imx.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information...

PT-2025-19322

Name of the Vulnerable Software and Affected Versions Synology Router Manager SRM affected versions not specified FileStation affected versions not specified Description A security issue exists in Synology Router Manager SRM related to insufficient protection of service data. Remote attackers may...

The vulnerability of the CIE.AspNetCore.Authentication library in the ASP.NET Core software platform arises from authentication procedures that have flaws. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the CIE.AspNetCore.Authentication library in the ASP.NET Core software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected informatio...

The vulnerability of the bootloader component in Android operating systems of Samsung mobile devices allows attackers to influence the confidentiality and accessibility of the protected information.

The vulnerability of the bootloader component in Android operating systems of Samsung mobile devices relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality and accessibility of the protected...

Vulnerability of the MySQL Server component: The Telemetry feature of the MySQL Server management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the MySQL Server component relates to insufficient protection of operational data due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network...

CVE-2024-34644: Undefined Security Weakness

Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability...