The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the mget parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Amazon Linux 2 : runc (ALASECS-2025-064)

The version of runc installed on the remote host is prior to 1.0.0-0.1.20200204.gitdc9208a. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-064 advisory. A flaw was found in runc. An attacker who controls the container image for two containers that share a volume...

The vulnerability of the del_gendisk() function in the block/blk-sysfs.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the delgendisk function in the block/blk-sysfs.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the UpdateOpcSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UpdateOpcSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, such as the TeleControl Server Basic, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allo...

The vulnerability of the hci_conn_del_sysfs() function in the net/bluetooth/hci_sysfs.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciconndelsysfs function in the net/bluetooth/hcisysfs.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Vulnerability of the rtw89_ops CancelHWScan() function in the drivers/net/wireless/realtek/rtw89/mac80211.c module – This driver supports Realtek wireless adapter devices in Linux operating systems. It can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the rtw89ops CancelHWScan function in the drivers/net/wireless/realtek/rtw89/mac80211.c file – The drivers for Realtek wireless adapter support in Linux operating systems are vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow ...

The vulnerability of the nilfs_clear_dirty_pages() function in the fs/nilfs2/page.c module of the NILFS2 file system support module for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nilfscleardirtypages function in the fs/nilfs2/page.c module of the NILFS2 file system support module in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Vulnerability of the btmtksdio_recv_event() function in the drivers/bluetooth/btmtksdio.c module – The Bluetooth device support driver for the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the btmtksdiorecvevent function in the drivers/bluetooth/btmtksdio.c module – The Linux kernel’s Bluetooth device support driver is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Vulnerability of the mt76_sta_pre_rcu_remove() function in the drivers/net/wireless/mediatek/mt76/mac80211.c module – A driver for supporting Mediatek wireless adapter devices in Linux kernel. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt76staprercuremove function in the drivers/net/wireless/mediatek/mt76/mac80211.c module – the driver for supporting Mediatek wireless adapter devices in Linux kernel – stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the __neigh_notify() function in the net/core/neighbour.c module, which is part of Linux’s kernel-based networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the neighnotify function in the net/core/neighbour.c module, which is part of Linux’s kernel-based networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

CVE-2025-30017

Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application...

CVE-2025-31332

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this...

CVE-2025-31332

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this...

DEBIAN-CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability...

CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability...

CVE-2024-38797

CVE-2024-38797 is a HashPeImageByType() read-bounds vulnerability in EDK2. Multiple advisories (EulerOS, Oracle Linux, Ubuntu, TencentOS) report that a corrupted data pointer/length sent over adjacent network can cause read out of bounds, with potential impact to integrity and availability. Explo...

CVE-2024-58107

CVE-2024-58107 describes a buffer overflow in Huawei HarmonyOS? codec module with impact to availability. Connected sources confirm HarmonyOS, codec module as the vulnerable component, and indicate network attack vector with low complexity, no user interaction, and high severity (CVSS v3.1). No c...

PT-2025-15161 · Arkui · Arkui

Name of the Vulnerable Software and Affected Versions: ArkUI framework affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the SVG parsing module of the framework. Successful exploitation of this vulnerability may affect availability...

EDK2 安全漏洞

EDK2 is a set of cross-platform firmware development environments from the Tianocore community based on the UEFI and PI specifications. A security vulnerability exists in EDK2 that stems from an out-of-bounds read in the HashPeImageByType function, which could lead to a loss of integrity and...

PT-2025-15273

Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description The issue is related to a vulnerability in the HashPeImageByType function, where a user can cause a read out of bounds by sending corrupted data via the network. This could lead to a loss of...