44289 matches found
CVE-2025-60638
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...
CVE-2025-52538: Integer Overflow or Wraparound
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability...
Oracle Fusion Middleware Identity Manager authentication bypass
Added: 11/24/2025 Background Oracle Fusion Middleware is a platform for creating and running applications. Problem An authentication bypass vulnerability in the Identity Manager component allows remote attackers to execute arbitrary commands by appending ;.wadl to a URL. Resolution See Oracle Pat...
free5GC security vulnerabilities
free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC versions 4.0.0 and 4.0.1, which stems from the NnssfNSSAIAvailability API mishandling of ad-hoc POST requests, which could lead to a denial of service...
OPENSUSE-SU-2025:15758-1 fontforge-20251009-2.1 on GA media
These are all security issues fixed in the fontforge-20251009-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-47953
A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...
CVE-2025-48510: Unexpected Status Code or Return Value
Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability...
CVE-2025-0003: Improper Resource Locking
Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability...
CVE-2025-60638
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...
AMD Xilinx Run Time security vulnerabilities
AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. A buffer overflow vulnerability exists in AMD Xilinx Run Time, which can be exploited by an attacker to cause the reading or corrupti...
CVE-2025-60638
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...
PT-2025-47942
Name of the Vulnerable Software and Affected Versions Free5GC versions 4.0.0 through 4.0.1 Description An issue exists that allows an attacker to cause a denial of service by sending a crafted POST request to the Nnssf NSSAIAvailability API endpoint. The request is specifically crafted to disrupt...
PT-2025-47966
Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. KSLR stands for Kernel Security Level...
AMD Xilinx Run Time security vulnerabilities
AMD XOCL driver is a driver developed by AMD for OpenCL Open Computing Language, which is mainly used to support the performance optimization of AMD's GPUs in heterogeneous and parallel computing tasks. An improper input validation vulnerability exists in AMD XOCL driver, which can be exploited b...
Code-Projects Blog Site Authorization Issues and Vulnerabilities
Blog Site is a blogging system. Blog Site suffers from an improper authorization vulnerability that originates in the file /admin.php, which can be exploited by an attacker to compromise confidentiality, integrity, and availability...
CVE-2025-60638
A Denial of Service (DoS) vulnerability exists in Free5GC v4.0.0 and v4.0.1 . The flaw is caused by a nil pointer dereference in the github.com/free5gc/nssf component when an attacker sends a crafted POST request to the Nnssf_NSSAIAvailability API while omitting the expiry field . This allows an ...
PT-2025-47960
Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability...
Apeman ID71 IP camera Data Compromise
The vulnerability of the Apeman ID71 IP camera’s microprogramming software is related to the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
BLU-IC2/BLU-IC4 Network Controller Data Compromise
The vulnerability of the BLU-IC2 and BLU-IC4 network controllers’ software is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...
TASO: Jailbreak LLMs Via Alternative Template and Suffix Optimization
Many recent studies showed that LLMs are vulnerable to jailbreak attacks, where an attacker can perturb the input of an LLM to induce it to generate an output for a harmful question. In general, existing jailbreak techniques either optimize a semantic template intended to induce the LLM to produc...