CVE-2025-23352

CVE-2025-23352 is associated with NVIDIA vGPU software, specifically the Virtual GPU Manager, where a malicious guest could trigger an uninitialized pointer access leading to possible code execution, DoS, privilege escalation, information disclosure, or data tampering. Multiple trusted sources (N...

GO-2025-3985 kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp

kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp...

PT-2025-55389

Уязвимость виртуального контроллера KLogic SCADA-системе «КАСКАД» связана с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

KVM Kernel DoS

The vulnerability of the Linux operating system’s KVM kernel component is related to the state of the gmapshadow and acquiregmapshadow functions. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...

Virtual Secure Mode Spoofing

The vulnerability of the Virtual Secure Mode protection mechanism in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows attackers to carry out spoofing attacks...

Veeam Backup & Replication Access Control Code Execution

The vulnerability of Veeam Backup & Replication’s protection tools for cloud, virtual, and physical systems stems from deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

PT-2025-62920

Уязвимость виртуального контроллера KLogic SCADA-системы «КАСКАД» связана с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить атаку методом «грубой силы» brute force...

PT-2025-55390

Уязвимость виртуального контроллера KLogic SCADA-системе «КАСКАД» связана с обходом аутентификации посредством использования альтернативного пути или канала. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и...

PT-2025-55388

Уязвимость виртуального контроллера KLogic SCADA-системы «КАСКАД» связана c использованием хэша пароля вместо самого пароля для аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемо...

CVE-2025-23352: Access of Uninitialized Pointer

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

PT-2025-55392

Уязвимость виртуального контроллера KLogic SCADA-системы «КАСКАД» связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

NVIDIA Virtual GPU Manager buffer error vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA Corporation. A buffer error vulnerability exists in NVIDIA Virtual GPU Manager, which stems from the presence of uninitialized pointer access to Virtual GPU Manager, and could lead to code execution, denial of...

CVE-2025-61881

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, 21.3-21.19 and 23.4-23.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this...

EUVD-2022-54777

In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: retrieve the virtual address before dmaunmap The TSO header was DMA unmapped before the virtual address was retrieved and then used to free the buffer. This meant that we were actually removing the DMA map and then...

EUVD-2022-55652

In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pchrequestdma As comment of pcigetslot says, it returns a pcidevice with its refcount increased. The caller must decrement the reference count by calling pcidevput. Since 'dmadev' is...

CVE-2025-60344

A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...

PT-2026-2610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to IOMMU Shared Virtual Addressing SVA. The kernel lacks a mechanism to notify the IOMMU of changes to kernel page tables when pages are freed an...

PT-2025-51624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s KSM Kernel Samepage Merging functionality experienced performance issues when scanning large virtual memory areas with mostly unmapped regions. The scan get next rmap...

SUSE CVE-2025-58147

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...

CVE-2025-61881

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, 21.3-21.19 and 23.4-23.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this...