11263 matches found
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64315
CVE-2025-64315 concerns a configuration defect in Huawei HarmonyOS, specifically in the file management module. The available sources describe a configuration flaw that can affect the confidentiality and integrity of application data if exploited. The documents do not provide concrete technical d...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
EUVD-2025-199841
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64315: Undefined Security Weakness
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A configuration flaw vulnerability exists in Huawei HarmonyOS, which stems from a configuration flaw in the file management module, and can be exploited by a...
PT-2025-48304
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
The vulnerability of FTP servers for managing Rumpus files, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of FTP servers for managing Rumpus files is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
VulnCheck KEV: CVE-2023-43654
TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity...
The vulnerability of the AuthKit library in the Next.js web application development platform allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the AuthKit library used in the Next.js web application development platform involves the disclosure of information through caching. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...
CVE-2025-12977
Fluent Bit inhttp, insplunk, and inelasticsearch input plugins fail to sanitize tagkey inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tagkey values containing special characters such as newlines or ../ that are treated as valid tags...
ROS-20251125-10
The vulnerability of the Brotli data compression algorithm is related to a flaw in the mechanism for checking the size of copied data. data. Exploitation of the vulnerability could allow an attacker acting remotely to compromise the integrity of the data integrity, as well as cause a denial of...
The vulnerability of the tools for working with the OpenID Connect protocol, related to improper authorization, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the tools for working with the OpenID Connect protocol is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
AMD CPUs have an unspecified vulnerability
AMD CPUs are a family of CPUs from AMD. An unspecified vulnerability exists in AMD CPUs, which can be exploited by an attacker to run SEV-SNP clients with stale TLB entries, resulting in a loss of data integrity...
CVE-2025-52539
A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...
EUVD-2025-198811
Fluent Bit inhttp, insplunk, and inelasticsearch input plugins fail to sanitize tagkey inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tagkey values containing special characters such as newlines or ../ that are treated as valid tags...