11301 matches found
Libsndfile au_read_header Heap Buffer Overflow DoS
The vulnerability of the aureadheader function in the src/au.c file of the Libsndfile library, which is used for reading and writing audio files, is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity,...
Google Chrome Memory Leak Data Compromise
The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data through a specially crafted HTML page...
nbd_disconnect_and_put() Function Buffer Overflow
Vulnerability of the nbddisconnectandput function in the drivers/block/nbd.c module – The Linux kernel’s block device support driver is vulnerable due to the repeated reuse of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
f2fs Component Data Compromise
The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker to compromise data integrity...
Imlib init_imlib_fonts() Heap Buffer Overflow DoS
The vulnerability of the initimlibfonts function in the Imlib image processing library is related to the failure of the operation outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause servic...
Libstb stb_vorbis Confidential Data Access Data Compromise
The vulnerability of the stbvorbis component in the C/C++ Libstb library is related to the repeated release of memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially creat...
Libstb Heap Buffer Overflow DoS
The vulnerability of the C/C++ Libstb library lies in the writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service failures through the use of a specially created file...
AMD64 Microcode Data Compromise
The vulnerability of AMD64 Microcode in processors relates to the improper handling of certain special address ranges with invalid device table entries. Exploiting this vulnerability can allow an attacker to compromise data integrity...
SAP Commerce Swagger UI Interactive Console Data Compromise
The vulnerability of the Swagger UI interactive console of the SAP Commerce platform is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected...
CVE-2025-26637 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-29791 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-26654
SAP Commerce Cloud Public Cloud does not allow to disable unencrypted HTTP port 80 entirely, but instead allows a redirect from port 80 to 443 HTTPS. As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request befor...
CVE-2025-26654 Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)
SAP Commerce Cloud Public Cloud does not allow to disable unencrypted HTTP port 80 entirely, but instead allows a redirect from port 80 to 443 HTTPS. As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request befor...
Zoom Workplace Cross-site Request Forgery Vulnerability
Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. A cross-site scripting vulnerability exists in Zoom Workplace. The...
Zoom Workplace Cross-site Request Forgery Vulnerability
Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a cross-site scripting vulnerability that can b...
PT-2025-15890 · Dell · Dell Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.4.0.0 through 9.10.0.0 Description: The issue is an out-of-bounds write vulnerability that could be exploited by an attacker in NFS workflows, potentially leading to data integrity issues. Recommendations: For...
Ruby Sinatra Data Compromise Issue
The vulnerability of the Ruby Sinatra web application development framework is related to errors in processing input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of protected information through the X-Forwarded-Host header...
AI Deployment Integer Overflow
The vulnerability of software for optimizing and deploying AI-based applications on AMD Ryzen AI systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
AMD Ryzen AI Integer Overflow
The vulnerability of software for optimizing and deploying AI-based applications related to AMD Ryzen AI is associated with a numerical overflow condition. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...
SIEM Systems Load Testing Toolkit UI Restriction
The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected informati...