GNU Binutils elflink.c Component Confidential Data Compromise Service Failures

The vulnerability of the elflink.c component of the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Fig2dev read_objects Heap Buffer Overflow Info Disclosure

The vulnerability of the readobjects function in the read.c component of the Fig2dev file conversion utility is related to buffer overflows in the stack. Exploiting this vulnerability could allow an attacker to access confidential data and compromise its integrity...

BasePeCoff UEFI Buffer Overflow DoS

The vulnerability of the PeCoffLoaderRelocateImage function in the BasePeCoff.c development component for UEFI applications in EDK2 is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential...

Linux kernel Trace Component Data Compromise

The vulnerability of the trace.c component in the Linux operating system’s kernel is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

Linux ucsi/displayport.c Component Data Compromise

The vulnerability of the ucsi/displayport.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

Linux sch_drr.c Component Data Compromise

The vulnerability of the schdrr.c component in the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Linux kernel io_uring DoS

The vulnerability of the iouring component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

Linux net/bluetooth/mgmt.c Buffer Overflow DoS

The vulnerability in the net/bluetooth/mgmt.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux s390 kernel driver Confidential Data Access

The vulnerability of the Linux operating system’s S390 kernel driver components is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

fs/exfat Kernel Data Compromise

The vulnerability of the fs/exfat component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

Linux drivers/dma/ti/k3-udma.c Buffer Overflow DoS

The vulnerability of the drivers/dma/ti/k3-udma.c component in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux kernel crypto hash_accept Heap Buffer Overflow DoS

The vulnerability of the hashaccept function in the crypto/algifhash.c component of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Firefox Thunderbird Confidential Data Compromise

The vulnerability in the Firefox web browser and the Thunderbird email client is related to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity...

Linux kernel sch_ets.c Data Compromise

The vulnerability of the schets.c component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise data integrity...

SUSE CVE-2025-59347

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTTP clients. The clients are not configurable, so users have no way to re-enable the verification. A Manager processes dozens of preheat job...

Cisco Adaptive Security Appliances VPN System Data Compromise

The vulnerability of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD VPN microprogramming devices lies in the absence of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information by...

CVE-2025-40836 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...

CVE-2025-27262 Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability

Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges...

CVE-2025-27262

CVE-2025-27262 summary (normal mode) : Ericsson Indoor Connect 8855 is affected by a command injection vulnerability in its handling of OS commands, enabling an attacker with local access to achieve privilege escalation. The CVSS basis metrics indicate a high-severity, local, low-exploitability-c...

Incorrect Bitwise Shift of Integer

Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Incorrect Bitwise Shift of Integer in the torch.bitwiserightshift function. An attacker can modify data integrity by leveraging local access with low...