18613 matches found
The vulnerability of the NFSD component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the NFSD component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the nfsd_file_put() function in the filecache.c component of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the nfsdfileput function in the filecache.c component of the Linux kernel lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to gain access to protected information.
The vulnerability of the C/C++ Libstb library lies in the writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability of the Python RSA cryptographic library, which stems from the use of cryptographic algorithms with defects, allows a perpetrator to gain access to confidential data.
The vulnerability of the Python RSA cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...
The vulnerability of HashiCorp’s Vault and Vault Enterprise storage platforms, which stem from lack of access control mechanisms, allows attackers to gain access to potentially confidential information.
The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms for corporate information lies in their lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to potentially confidential information...
CVE-2025-30281
CVE-2025-30281 affects Adobe ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier. The vulnerability is an Improper Access Control that could allow a high-privilege, remote attacker to access or modify sensitive data and potentially execute arbitrary code without user interaction. The issue’s...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and gain access to sensitive data. The vulnerability with reference CVE-2025-27489 allows the malicious party, by loading a non-Microsoft DLL...
Vulnerabilities fixed in Siemens products
Siemens has fixed vulnerabilities in various products such as Industrial Edge Devices, Mendix, SENTRON, SIDIS, SIMATIC, SIPLUS,Insights Hub Private Cloud, Siemens License Server and Solid Edge. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the...
CVE-2025-27437
CVE-2025-27437 affects SAP NetWeaver Application Server ABAP, specifically the Virus Scanner Interface. The vulnerability is a missing authorization check that allows an attacker authenticated as a non-administrative user to initiate a transaction and access but not modify non-sensitive data, wit...
CVE-2025-27437 Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface)
A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authenticated as a non-administrative user can initiate a transaction, allowing them to access but not modify non-sensitive data without further...
CVE-2025-20938
Improper access control in SamsungContacts prior to SMR Apr-2025 Release 1 allows local attackers to access protected data in SamsungContacts...
ARM多款产品 安全漏洞
ARM 5th Gen GPU Architecture Kernel Driver and ARM Bifrost GPU Userspace Driver are both products of ARM, U.K. ARM 5th Gen GPU Architecture Kernel Driver is a GPU kernel driver.ARM ARM 5th Gen GPU Architecture Kernel Driver is a GPU kernel driver and ARM Bifrost GPU Userspace Driver is a userspac...
The vulnerability of the “Open Git Repository in Terminal” control element, a extension for the JupyterLab web-oriented interactive development environment, allows an attacker to gain access to and modify data, as well as execute arbitrary commands.
The vulnerability of the “Open Git Repository in Terminal” control element in the JupyterLab-Git web-oriented interactive development environment is related to the failure to implement measures to neutralize special elements used in the operating system command line. Exploiting this vulnerability...
CVE-2024-13604
The KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.4 via the 'kbs' directory. This makes it possible for unauthenticated attackers to extract sensitive dat...
PT-2025-14895 · Unknown · Shiptrack Booking Calendar/Notification
Name of the Vulnerable Software and Affected Versions: shiptrack Booking Calendar and Notification versions n/a through 4.0.3 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing attackers to trigger a service failure and gain unauthorized access to protected information.
The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow attackers to cause service failures and gain unauthorized access to protected information using a specially created...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to memory usage after it is released, allowing attackers to trigger a service failure and gain unauthorized access to protected information.
The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure and gain unauthorized access to protected information using a specially created 3DM fi...
Security Bulletin: Multiple Java Vulnerabilities in IBM Event Streams
Summary Multiple Java SE vulnerabilities were addressed in IBM Event Streams version 11.5.1. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
CVE-2025-30460
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...