CVE-2025-0003

Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability...

CVE-2025-0003

AMD Xilinx Run Time (XRT) drivers, specifically the user-space XOCL path, are affected by a lock-protection deficiency that can trigger a Use-After-Free condition when exploited locally. This can lead to loss of confidentiality or availability. The issue is consistently described across multiple ...

DOM Component Security Bypass

Vulnerability of the DOM component: The security of Mozilla Firefox and Firefox ESR browsers is related to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Mozilla Firefox DOM Component Bypass

Vulnerability of the DOM component: The Workers mechanism in Mozilla Firefox and Firefox ESR browsers is related to data protection vulnerabilities. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Mozilla Firefox Notifications DOM Bypass

Vulnerability of the DOM component: Notifications in Mozilla Firefox and Firefox ESR browsers are related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...

DOM Component Bypass Security Restrictions

Vulnerability of the DOM component: Core and HTML browsers like Mozilla Firefox and Firefox ESR are vulnerable due to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

AMD Xilinx Run Time security vulnerabilities

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. AMD Xilinx Run Time suffers from a locking protection deficiency vulnerability that can be exploited by an attacker to cause reuse...

ROS-20251124-14

A vulnerability in the Security component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is related to access control weaknesses. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to read,...

PT-2025-47966

Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. KSLR stands for Kernel Security Level...

CVE-2025-66075

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.3...

WordPress plugin: Cookie Notice & Compliance for GDPR/CCPA – Cross-site Script Vulnerabilities

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

Why IT Admins Choose Samsung for Mobile Security

Ever wonder how some IT teams keep corporate data safe without slowing down employees? Of course you have. Mobile devices are essential for modern work—but with mobility comes risk. IT admins, like you, juggle protecting sensitive data while keeping teams productive. That's why more enterprises a...

Nagios XI Highcharts XSS

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to perform cross-site scripting attacks...

KeeneticOS XSS

The vulnerability of the KeeneticOS operating system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks and gain full control over the device...

Business Process Intelligence Nagios XI XSS

The vulnerability of the Business Process Intelligence BPI module of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

PT-2025-47698

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...

PT-2025-47747

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.3...

WordPress plugin: Import WP security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress Import WP plugin, which stems from a lack of .htaccess protection for the import and export functionality, which can ...

TencentOS Server 3: libxslt (TSSA-2022:0062)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0062 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Trend & AWS Partner on Cloud IPS: One-Click Protection

In the race to secure cloud infrastructure, intrusion prevention systems IPS remain one of the most critical yet complex at the cloud network layer of defense. For many organizations, deploying IPS in the cloud is a balancing act between agility and control...