CVE-2025-43972

An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context...

Fortinet FortiClient Cross-Site Scripting Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. Fortinet FortiClient suffers from a cross-site scripting...

Huawei HarmonyOS Buffer Overflow Vulnerability Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability that can be exploited by attackers to affect availability...

ROS-20250417-07

Exim mail server vulnerability is related to memory usage after memory is freed. Exploitation of the vulnerability could allow an attacker to escalate his privileges...

Insecure Deserialization

lmdeploy is vulnerable to Insecure Deserialization. The vulnerability is due to unsafe handling in the loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler, allowing local attackers to exploit it...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the optimizer component and can be exploited by an attacker to cause a complete denial of service...

The vulnerability of the ad7780 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ad7780 component in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the int3400_setup_gddv() function in the drivers/thermal/intel/int340x_thermal/int3400_thermal.c module – a Linux kernel temperature control driver that allows a hacker to cause a service failure.

Vulnerability of the int3400setupgddv function in the drivers/thermal/intel/int340xthermal/int3400thermal.c module – The Linux kernel temperature control driver contains errors in its code. Exploiting this vulnerability could allow an attacker to cause system failures...

SAP Commerce Cloud Information Disclosure Vulnerability (CNVD-2025-07505)

SAP Commerce Cloud is a set of cloud-based e-commerce platform from Germany's SAP. The product supports sales management, marketing management, order management and operations management. An information disclosure vulnerability exists in SAP Commerce Cloud, which can be exploited by an attacker t...

The vulnerability of the svcrdma component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the svcrdma component in the Linux operating system’s kernel is related to defects in exception handling in the svcrdmaprocinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wyse Management Suite Denial of Service Vulnerability

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints, including centralized management of Wyse endpoints, asset tracking and automated device discovery from Dell. A denial of service vulnerability exists in Wyse Management Suite for Dell. The vulnerability stems...

CVE-2025-29989

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial...

The vulnerability of the fslog.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the fslog.c component in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/gpu/drm/vc4/vc4_hdmi.c kernel component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/gpu/drm/vc4/vc4hdmi.c kernel component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

Microsoft Windows Telephony Service Remote Code Execution Vulnerability (CNVD-2025-07784)

Microsoft Windows Telephony Service is based on IBinder to provide phone status and telephony services. A remote code execution vulnerability exists in Microsoft Windows Telephony Service, which can be exploited by an attacker to execute code on the target host...

CVE-2024-46671

FortiWeb contains an Incorrect User Management (CWE-286) vulnerability affecting FortiWeb versions 7.6.2 and below, 7.4.6 and below, 7.2.10 and below, and 7.0.11 and below. An authenticated attacker with at least read-only admin privileges can perform operations on the dashboard of other administ...

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability that can be exploited by an attacker to...

PT-2025-15345

Name of the Vulnerable Software and Affected Versions: libsavsac.so versions prior to SMR Apr-2025 Release 1 Description: The issue is related to an out-of-bounds read in parsing audio data, which allows local attackers to read out-of-bounds memory. This can be exploited by local attackers...

Microsoft AutoUpdate for Mac 安全漏洞

Microsoft AutoUpdate for Mac is a Microsoft product auto-update application for the Mac platform from Microsoft Corporation USA. A security vulnerability exists in Microsoft AutoUpdate for Mac. An attacker can exploit the vulnerability to elevate privileges...

Google Android elevation of privilege vulnerability (CNVD-2025-11432)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which arises from the program incorrectly retaining setup privileges, and can be exploited by an attacker to elevate privileges without requiring addition...