The vulnerability of the rt5645_i2cremove() function in the sound module/soc/codecs/rt5645.c file, which is part of the Linux operating system’s SoC audio kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rt5645i2cremove function in the sound module/soc/codecs/rt5645.c file, which is part of the Linux operating system’s sound support for SoC cores, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise t...

Vulnerability of the btmtksdio_recv_event() function in the drivers/bluetooth/btmtksdio.c module – The Bluetooth device support driver for the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the btmtksdiorecvevent function in the drivers/bluetooth/btmtksdio.c module – The Linux kernel’s Bluetooth device support driver is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in browser extensions for Safari on operating systems macOS, iOS, iPadOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the kvm_tdp_mmu_put_root() function in the arch/x86/kvm/mmu/tdp_mmu.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmtdpmmuputroot function in the arch/x86/kvm/mmu/tdpmmu.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromis...

CVE-2025-26479

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker could potentially exploit this vulnerability in NFS workflows, leading to data integrity issues...

Advisory ROSA-SA-2025-2819

Software: squashfs-tools 4.3 OS: ROSA Virtualization 3.0 packageevrstring: squashfs-tools-4.3-21.rv30 CVE-ID: CVE-2021-40153 BDU-ID: 2021-05217 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the squashfsopendir function of the unsquash-1.c component of the Squashfs Squashfs-Tools file system...

CVE-2025-26654

SAP Commerce Cloud Public Cloud does not allow to disable unencrypted HTTP port 80 entirely, but instead allows a redirect from port 80 to 443 HTTPS. As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request befor...

CVE-2025-26479

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker could potentially exploit this vulnerability in NFS workflows, leading to data integrity issues...

CVE-2025-26479

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker could potentially exploit this vulnerability in NFS workflows, leading to data integrity issues...

CVE-2025-26479

Dell PowerScale OneFS contains an out-of-bounds write vulnerability affecting versions 9.4.0.0 through 9.10.0.0, exploitable via NFS workflows and potentially causing data integrity issues. The issue stems from an application boundary error when processing untrusted input. Public references consi...

CVE-2025-26479

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker could potentially exploit this vulnerability in NFS workflows, leading to data integrity issues...

CVE-2025-26479

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker could potentially exploit this vulnerability in NFS workflows, leading to data integrity issues...

The vulnerability of the OpenSearch software package, related to the disclosure of information through discrepancies, allows a perpetrator to compromise the integrity of data.

The vulnerability of the OpenSearch software package is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows an attacker to manipulate the presentation of critical information to the user interface, thereby compromising data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to the improper presentation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

The vulnerability of the RabbitMQ messaging broker lies in the failure to remove script-related HTML tags from web pages, allowing attackers to compromise data integrity.

The vulnerability of the RabbitMQ messaging broker is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the `twisted.web.util.redirectTo` function in the Twisted web framework allows a attacker to access confidential data and compromise its integrity.

The vulnerability of the twisted.web.util.redirectTo function in the Twisted web framework is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the GUPnP framework for UPnP devices stems from the dependence of critical operations on the reverse DNS solution. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the GUPnP device framework relates to the dependence of critical operations on the reverse DNS solution. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the f2fs component of the Linux operating system’s kernel allows a hacker to compromise data integrity.

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data through a specially crafted HTML page...

The vulnerability of the `init_imlib_fonts()` function in the Imlib image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the initimlibfonts function in the Imlib image processing library is related to the failure of the operation outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause servic...