CVE-2021-27629

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

CVE-2025-37955

No description is available for this CVE...

CVE-2025-37902

No description is available for this CVE...

There are no apps and desktops available to you at this time [Incomplete DDC Certificate Update]

Storefront: There are no apps and desktops available to you at this time - Event logs ID: 4012: None of the Citrix XML Services configured for farm are in the list of active services, so none were contacted...

DEBIAN-CVE-2025-37966

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PRSETTAGGEDADDRCTRL When userspace does PRSETTAGGEDADDRCTRL, but Supm extension is not available, the kernel crashes: Oops - illegal instruction 1 snip epc : settaggedaddrctrl+0x112/0x15a ra :...

UBUNTU-CVE-2025-37966

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PRSETTAGGEDADDRCTRL When userspace does PRSETTAGGEDADDRCTRL, but Supm extension is not available, the kernel crashes: Oops - illegal instruction 1 snip epc : settaggedaddrctrl+0x112/0x15a ra :...

VMware Cloud Foundation 安全漏洞

VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware. The platform includes features such as operations automation, infrastructure auto-configuration and integrated lifecycle management. VMware Cloud Foundation suffers from an authorization issue vulnerability that stems fro...

CVE-2025-23166

A flaw was found in Node.js, specifically in the C++ method SignTraits::DeriveBits. This vulnerability can allow a remote attacker to crash the Node.js runtime via untrusted input, triggering an exception in a background thread. Mitigation Mitigation for this issue is either not available or the...

CVE-2025-46801

A flaw was found in Pgpool-II. This vulnerability allows an attacker to log in as an arbitrary user, enabling unauthorized access to read, modify, or disable database contents via an authentication bypass. Mitigation Mitigation for this issue is either not available or the currently available...

WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Pinterest Automatic Pin versions = 4.19.0...

TOTOLINK A3002RU和TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R and A3002RU are routers from TOTOLINK that support a wide range of network features and services. The TOTOLINK A3002R and A3002RU suffer from a buffer overflow vulnerability that stems from improper handling of the file /boafrm/formIpQoS in the HTTP POST request handler. No...

CVE-2024-43420

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-46804

A flaw was found in Screen. It generates an error message that allows unprivileged users to deduce information about a path that should not be accessible. Mitigation No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or...

CVE-2025-46805

A flaw was found in Screen. A possible denial of service caused by race conditions when sending signals exists. The CheckPid function drops privileges to the real user ID and tests whether the kernel can send a signal to the target PID using these credentials. The signal is sent later via Kill,...

CVE-2025-46803

A flaw was found in Screen. The default mode for pseudo-terminals PTYs allocated by Screen was changed from 0620 to 0622. This vulnerability allows public writes to any PTYs in the system. Mitigation No mitigation is currently available that meets Red Hat Product Security’s standards for usabilit...

kernel: platform/x86/amd/pmc: Detect when STB is not available

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amdpmc module as: amdpmc enablestb=1 ...can result in the following messages in the kernel ring buffer: amdpmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on R...

PT-2025-20936 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue allows an unauthorized attacker to bypass a security feature locally in Visual Studio Code when files or directories are accessible to external parties. Recommendations...

CVE-2025-22247

A vulnerability was found in open-vm-tools. A malicious actor with non-administrative privileges on a guest virtual machine VM may tamper with the local files to trigger insecure file operations within that VM. Mitigation Currently, no mitigation is available for this vulnerability...

PT-2025-27758

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns handling zero-length skcipher requests in the Linux kernel's crypto module, specifically the marvell/cesa component. The problem arises when the kernel attempts to...

CVE-2025-37882

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event,...