9667 matches found
CVE-2025-24305
Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-22889
CVE-2025-22889 affects Intel Xeon 6 processors with Intel TDX. The root cause is improper handling of overlap between protected memory ranges, which may allow a privileged user to escalate privileges via local access. Publicly documented mitigations involve microcode updates (e.g., intel-microcod...
CVE-2025-22853
Intel TDX firmware contains an improper synchronization issue that can allow a privileged user with local access to escalate privileges (CVE-2025-22853). The issue is documented in the Intel advisory INTEL-SA-01312 and is associated with Intel(R) TDX firmware and related processors. According to ...
CVE-2025-21096
CVE-2025-21096 involves the Intel® TDX firmware and is caused by improper buffer restrictions in the firmware. This vulnerability could allow a privileged, local attacker to escalate privileges. Intel’s advisory (Intel SA-01312) references CVE-2025-21096 among related TDX issues and recommends up...
CVE-2025-20613
Predictable Seed in Pseudo-Random Number Generator PRNG in the firmware for some IntelR TDX may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2025-42934
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...
CVE-2025-42934 CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...
CVE-2025-42934 CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed LF characters into application inputs. This vulnerability has a low impact on the...
CVE-2025-42934
Context: CVE-2025-42934 affects SAP S/4HANA Supplier invoice. What’s vulnerable: CRLF injection in inputs that bypasses the allowlist, enabling injection of untrusted sites into the Trusted Sites configuration. Affects SAP S/4HANA Supplier invoice functionality; root cause described as LF-based i...
Intel TDX 缓冲区错误漏洞
Intel TDX is a CPU-level technology from Intel Corporation USA. It is used to implement a trusted execution environment. Intel TDX suffers from a buffer error vulnerability that stems from improper buffer restriction, which could lead to elevation of privilege...
PT-2025-32744
Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processors affected versions not specified Description: An out-of-bounds write issue exists in the memory subsystem of certain IntelR XeonR 6 processors when utilizing IntelR SGX or IntelR TDX. A privileged user may be able to...
PT-2025-32757
Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 Processors affected versions not specified Description: An improperly implemented security check for standard in the DDRIO configuration may allow a privileged user to potentially enable escalation of privilege via local access...
PT-2025-32600 · Sap · Sap S/4Hana
Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites'...
PT-2025-32718 · Intel · Intel Tdx
Name of the Vulnerable Software and Affected Versions: IntelR TDX affected versions not specified Description: An improper synchronization issue exists within the firmware of certain IntelR TDX implementations. A user with privileged access may be able to escalate their privileges through local...
Intel TDX Module firmware 安全漏洞
Intel TDX Module firmware is a firmware from Intel Corporation USA. A security vulnerability exists in Intel TDX Module firmware versions prior to 1.5.13, which stems from improper locking and may result in elevated privileges...
Intel TDX 安全漏洞
Intel TDX is a CPU-level technology from Intel Corporation USA. It is used to implement a trusted execution environment. A security vulnerability exists in Intel TDX that stems from improper synchronization and could lead to elevation of privilege...
Linux Distros Unpatched Vulnerability : CVE-2021-47229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIOSTART register when previous transfer has not ye...
Intel® Xeon® 6 Processor with Intel® TDX Advisory
Summary: A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing a microcode update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-22889 Description:...
SUSE CVE-2025-55000
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, OpenBao's TOTP secrets engine could accept valid codes multiple times rather than strictly-once. This was caused by unexpected...
