PT-2025-52955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the virtio random number generator rng device when handling entropy requests and data availability. Specifically, the issue occurs when a new request is...

The vulnerability of the Apache Guacamole software for remote management of client machines, related to unvalidated array indexing, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Apache Guacamole, a software for remote administration of client machines, is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

The vulnerability in the driver module/gpio/gpio-wcd934x.c, a driver for supporting GPIO on the Linux operating system’s kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the driver/gpio/gpio-wcd934x.c driver for Linux kernel’s GPIO support is related to an incorrect bit shifting of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the net/appletalk/aarp.c component in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net/appletalk/aarp.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the `fs/smb/client/smb2ops.c` component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fs/smb/client/smb2ops.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the sctp_v6_from_sk() function in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sctpv6fromsk function in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Linux operating system’s kernel’s IPv6 component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s IPv6 kernel component relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the f2fs component of the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-52539

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

The vulnerability of the fromPptpUserSetting() function in the Tenda CH22 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromPptpUserSetting function in the Tenda CH22 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the delno parameter. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of FTP servers for managing Rumpus files, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of FTP servers for managing Rumpus files is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the tools for working with the OpenID Connect protocol, related to improper authorization, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the tools for working with the OpenID Connect protocol is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-52539

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

The vulnerability of the Apeman ID71 IP camera’s microprogramming software, which stems from the use of strictly encrypted login credentials, allows intruders to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apeman ID71 IP camera’s microprogramming software is related to the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-65029: Improper Authorization

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference IDOR vulnerability allows any authenticated user to delete arbitrary participants from polls without ownership verification. The endpoint relies solely on a participant ID to...

CVE-2025-41346

Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another user's account, thereby affecting the confidentiality, integrity, and availabili...

CVE-2025-41346 Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another user's account, thereby affecting the confidentiality, integrity, and availabili...

CVE-2025-41346

Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another user's account, thereby affecting the confidentiality, integrity, and availabili...

The vulnerability of the NetBird VPN client, related to the use of default login credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the VPN client NetBird is related to the use of default login credentials. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...