CVE-2022-31602

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure...

CVE-2023-45841

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

CVE-2023-45840

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

CVE-2021-33671

SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...

CVE-2021-2181

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2021-2198

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: Setup, Admin. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2022-31609

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure...

CVE-2022-35942

Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of data...

The vulnerability of the ZITADEL identification data management software platform, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the ZITADEL identification data management software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the OpenCTI platform for analyzing cyber threats, related to improper code generation, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the OpenCTI platform for analyzing cyber threats is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the PowerDNS Recursor DNS server, related to the failure to neutralize special elements in the output data, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the PowerDNS Recursor DNS server relates to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

The vulnerability of Gridscale X Prepay software lies in its ability to bypass the authentication process, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Gridscale X Prepay software relates to the possibility of bypassing the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, which is related to the use of rigidly encrypted account data, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway lies in the use of strictly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the PowerDNS Recursor DNS server, related to the failure to take measures to neutralize special elements in the output data, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the PowerDNS Recursor DNS server relates to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

The vulnerability of software for centralized control of desktop PCs in the Zohocorp ManageEngine EndPoint Central network allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of software for centralized control of desktop PCs in the Zohocorp ManageEngine EndPoint Central network is related to errors in processing XML requests. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using specially created XML data...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000365)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000365 advisory. A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from...

The vulnerability of the microprogramming software of ABB Terra AC wallboxes for electric vehicles lies in buffer overflows in dynamic memory, which allows a intruder to compromise the integrity and accessibility of protected information.

The vulnerability of the microprogramming software of ABB Terra AC wallboxes for electric vehicles is related to the overflow of buffer in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the Invite Request Handler component in the software for monitoring functionality and infrastructure of BlueWave Checkmate allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Invite Request Handler component in the software for monitoring functionality and infrastructure of BlueWave Checkmate is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the Manifest File Handler component in Comodo Internet Security Premium antivirus software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Manifest File Handler component in Comodo Internet Security Premium relates to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

The vulnerability of the Zincati automatic update agent lies in a logical priority error of operators, which allows attackers to compromise the integrity of the protected information.

The vulnerability of the Zincati automatic update agent is related to a logical priority error in operator operations. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...