IntraService Customer Interaction System Authentication Bypass

The vulnerability of the IntraService customer interaction system relates to the bypassing of authentication procedures by using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...

drm/xe Component Confidential Data Access DoS

The vulnerability of the drm/xe component in the Linux operating system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions...

Linux scsi/bfa/bfad_im.c Buffer Overflow DoS

The vulnerability of the scsi/bfa/bfadim.c component of the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

Linux lpfc/lpfc_scsi.c Component Data Compromise

The vulnerability of the lpfc/lpfcscsi.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability allows an attacker to compromise the integrity of data and also cause service failures due to the corrupted image file...

Linux Astra Modules Kernel Module Data Compromise

The vulnerability of Linux Astra Modules relates to errors during thread blocking. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the use of a specially created file system...

libwx Kernel Data Compromise

The vulnerability of the libwx component in the Linux operating system’s kernel is related to the lack of initialization for resources. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

Building Trustworthy AI Agents

The promise of personal AI assistants rests on a dangerous assumption: that we can trust systems we haven’t made trustworthy. We can’t. And today’s versions are failing us in predictable ways: pushing us to do things against our own best interests, gaslighting us with doubt about things we are or...

WebRTC Component Compromise Data Compromise

The vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

Apache HTTP Server Data Compromise

The vulnerability of the Apache HTTP Server is related to the lack of measures taken to neutralize specific control elements. Exploiting this vulnerability allows a remote attacker to influence the confidentiality and integrity of the protected information...

EUVD-2025-202720

pgAdmin versions up to 9.10 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

EUVD-2025-202412

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-3056248)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from improper input validation, and can be exploited by an attacker to cause impact on...

Linux add_missing_indices() Buffer Overflow

The vulnerability of the addmissingindices function in the Linux operating system’s kernel is related to the reading of data beyond the specified buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

EUVD-2025-202313

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to...

CVE-2025-9612

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on Transaction Layer Packet TLP ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical...

CVE-2025-9613 CVE-2025-9613

A vulnerability was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completion...

CVE-2025-9613

A vulnerability exists in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification due to insufficient guidance on tag reuse following completion timeouts. This flaw allows multiple outstanding Non-Posted Requests to share the same tag, creating a tag aliasing condition. Consequen...

CVE-2025-9613 CVE-2025-9613

A vulnerability was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completion...

CVE-2025-9614 CVE-2025-9614

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to...