CVE-2025-24921

Intel Edge Orchestrator on Intel® Tiber™ Edge Platform is affected by CVE-2025-24921. Before version 24.11.1, an unauthenticated user may cause information disclosure via adjacent access due to improper neutralization. The vulnerability has CVSS v3.1 base score 6.6 (AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:...

CVE-2025-24921

Improper neutralization for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-24523

Protection mechanism failure for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-22839

Insufficient granularity of access control in the OOB-MSM for some IntelR XeonR 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2025-22839

Insufficient granularity of access control in the OOB-MSM for some IntelR XeonR 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2025-22839

CVE-2025-22839 affects Intel Xeon 6‑scalable CPUs due to insufficient granularity of access control in the OOB‑MSM, potentially enabling privilege escalation via adjacent/local access. Connected documents consistently tie this to Intel microcode exposure and advisories; mitigations rely on microc...

CVE-2025-20625

Improper conditions check for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.110.0.5 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20625

Intel PROSet/Wireless WiFi Software for Windows is affected by CVE-2025-20625 due to an improper conditions check in versions before 23.110.0.5. The issue may allow an unauthenticated user to potentially cause denial of service via adjacent access. Severity is High (CVSSv3.1: 7.4; CVSSv4.0: 7.1)....

Windows Hyper-V Denial of Service Vulnerability

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...

CVE-2025-42955

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of...

CVE-2025-42955 Missing authorization check in SAP Cloud Connector

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of...

CVE-2025-42955 Missing authorization check in SAP Cloud Connector

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of...

CVE-2025-42955

CVE-2025-42955 involves a missing authorization check in SAP Cloud Connector. An attacker on an adjacent network with low privileges can send a crafted request to the LDAP testing endpoint, potentially causing degraded service availability (low impact). Confidentiality and integrity are not affec...

PT-2025-32751 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: Improper input validation in Edge Orchestrator software may allow an authenticated user to potentially escalate privileges via adjacent access. Recommendations: Update Edge Orchestrator...

Linux Distros Unpatched Vulnerability : CVE-2023-6200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router...

PT-2025-32769 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: A missing synchronization flaw in Windows Hyper-V can allow an authorized attacker to cause a denial of service to an adjacent network. Recommendations: At the moment, there is no...

PT-2025-32612 · Sap · Sap Cloud Connector

Name of the Vulnerable Software and Affected Versions: SAP Cloud Connector affected versions not specified Description: A missing authorization check in SAP Cloud Connector allows an attacker on an adjacent network with low privileges to send a crafted request to the endpoint responsible for...

PT-2025-32747 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: An uncontrolled resource consumption issue in some Edge Orchestrator software may allow an authenticated user to potentially enable a denial of service via adjacent access...

CVE-2025-8654

Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fla...

CVE-2025-8654 Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability

Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fla...