10918 matches found
CVE-2025-48707
An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...
Stormshield Network Security security vulnerabilities
Stormshield Network Security SNS is a next-generation UTM Unified Threat Management firewall from Stormshield France. A security vulnerability exists in Stormshield Network Security versions prior to 5.0.1, which stems from the fact that TPM authentication information may be shared in HA use case...
CVE-2025-48707
An issue was discovered in Stormshield Network Security (SNS) versions prior to 5.0.1 , where TPM authentication information could be shared among administrators in specific High Availability (HA) use cases. This flaw potentially leads to secret sharing . Remediation involves updating to version ...
CVE-2025-21476
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
CVE-2025-21481
Memory corruption while performing private key encryption in trusted application...
CVE-2025-21481
CVE-2025-21481 is linked to memory corruption during private key encryption in a trusted application, specifically within the Adreno GPU DRM driver. The PT-2025-23797 entry describes a use-after-free condition in the Direct Rendering Manager (DRM) Driver of the Adreno GPU, affecting unspecified A...
CVE-2025-21481 Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application...
CVE-2025-21481 Buffer Copy Without Checking Size of Input in HLOS
Memory corruption while performing private key encryption in trusted application...
CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
CVE-2025-21476
CVE-2025-21476 concerns memory corruption when passing parameters to the Trusted Virtual Machine during the handshake on Qualcomm chipsets. The vulnerability is characterized by a Local attack with Low complexity, Low privileges required, no user interaction, and a high impact on Confidentiality,...
CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
PT-2025-39266
Name of the Vulnerable Software and Affected Versions Versions prior to 2025 Description A memory corruption issue exists when parameters are passed to the Trusted Virtual Machine during the handshake process. Recommendations At the moment, there is no information about a newer version that...
CVE-2025-21476: Buffer Copy without Checking Size of Input
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
Qualcomm Chipsets security vulnerabilities
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption that occurs when parameters are passed to the Trusted Virtual Machine during a handshake...
CVE-2025-58354
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, ...
CVE-2025-58354 Kata Containers coco-tdx malicious host can circumvent initdata verification
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, ...
CVE-2025-9844
Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...
Uncontrolled Search Path Element
Overview @salesforce/cli is a The Salesforce CLI Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the Replace Trusted Executable feature. An attacker can execute arbitrary code by placing a malicious executable in a directory that is searched before the...