Kraken Stress Testing Toolkit Header Misuse

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to the improper use of X-Content-Type-Options headers for protection mechanisms. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...

CVE-2024-36328

Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or availability...

ViewJet C-more Series Access Control Bypass

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels lies in their ability to bypass access control mechanisms. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Web 3.0 Requires Data Integrity

If you've ever taken a computer security class, you've probably learned about the three legs of computer security--confidentiality, integrity, and availability--known as the CIA triad. When we talk about a system being secure, that's what we're referring to. All are important, but to different...

ROS-20250403-11

Vulnerability in the OpenSearch software package related to calls that utilize an internal underlying Identity Provider IdP rather than other externally configured IdPs. Exploitation of the vulnerability could Allow an attacker to impact data integrity...

OpenImageIO BmpInput::read_native_scanline Heap Buffer Overflow

The vulnerability of the BmpInput::readnativescanline function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

AMD NPU driver input validation error vulnerability

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting integrity and availability...

Keycloak security vulnerabilities

Keycloak is an open source identity and access management solution from Keycloak Open Source. Keycloak suffers from a security vulnerability that stems from the fact that an attacker can steal user sessions, thereby compromising data confidentiality and integrity...

Linux dbAdjTree Heap Buffer Overflow DoS

The vulnerability of the dbAdjTree function in the fs/jfs/jfsdmap.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

SAP Just In Time Authorization Bypass

The vulnerability of the monitoring and control application for SAP Just In Time is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...

Linux kernel NFS Export Buffer Overflow DoS

The vulnerability of the eshow function in the fs/nfsd/export.c module, which is part of the NFS network file system support in Linux kernels, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

Linux kernel btrfs_encoded_read_endio Heap Buffer Overflow DoS

The vulnerability of the btrfsencodedreadendio function in the fs/btrfs/inode.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux kernel Wireless MCU Function CVE

Vulnerability of the mt7921mcutxratereport function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c module – The driver for supporting wireless connection adapters in the Linux operating system is vulnerable due to buffer out-of-bounds reading. Exploiting this vulnerability could allow an...

pvr2_context_exit() Function Heap Buffer Overflow DoS

Vulnerability of the pvr2contextexit function in the drivers/media/usb/pvrusb2/pvrusb2-context.c module – The Linux kernel’s USB multimedia device driver architecture relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

SAP S/4HANA Manage Bank Statements Data Compromise

The vulnerability of the “Manage Bank Statements” component of the SAP S/4HANA software platform involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected informatio...

CGA-4585-55CM-34X5

Bulletin has no description...

CVE-2025-2819

There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user...

RHEL 9 : bzip2 (RHSA-2025:0925)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0925 advisory. The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as...

CVE-2025-30364

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/funcionario/remuneracao.php, in the idfuncionario parameter. This vulnerability allows the execution of arbitrary SQL commands, which can...

CVE-2025-30775

CVE-2025-30775 is a SQL Injection vulnerability in AmentoTech WPGuppy for WordPress. Affected: WPGuppy versions up to and including 1.1.3 (affected range noted as n/a through 1.1.3). Root cause: improper neutralization of special elements in SQL commands. Impact (per CVSS 3.1 metrics): unauthoriz...