The vulnerability in the `net/sched/sch_prio.c` component of the Linux operating system allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the net/sched/schprio.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, compromise its integrity, and cause...

The vulnerability of the ins_typebuf() function in the Vim text editor allows a hacker to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the instypebuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise its integrity, and even cause...

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool arises from the lack of measures taken to neutralize specific elements. This allows attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, enhance their...

The vulnerability of the fromPptpUserAdd() function in the Tenda FH1206 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromPptpUserAdd function in the Tenda FH1206 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...

The vulnerability of the kasan_find_vm_area() function (mm/kasan/report.c) in the Linux operating system’s kasan component, which allows a hacker to cause a service failure

The vulnerability of the kasanfindvmarea function mm/kasan/report.c in the Linux kernel’s kasan component is related to mutual locking of execution threads. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2025-34200: Cleartext Storage of Sensitive Information

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to...

CVE-2025-37124

A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruptio...

CVE-2025-37128

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

PT-2025-38481

Name of the Vulnerable Software and Affected Versions Dover Fueling Solutions ProGauge MagLink LX4 Devices affected versions not specified Description ProGauge MagLink LX4 devices are susceptible to a time-based issue where they fail to correctly handle Unix time values exceeding a specific point...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable due to improper handling of the usedTraffic field in the processPieceFromSource method. An attacker can cause service disruption for a peer by exploiting incorrect rate limiting during task processing...

mysql: InnoDB unspecified vulnerability (CPU Apr 2025)

A flaw was found in Oracle MySQL Server InnoDB component. A high-privileged remote attacker with network access can cause a denial of service DoS and gain unauthorized ability to modify data in MySQL Server...

The vulnerability of the command-line tool man2html, related to the issue of writing operations out of buffer in memory when processing the size parameter, allows an attacker to execute arbitrary code or cause a service failure.

The vulnerability of the command-line tool man2html is related to the issue of the operation going beyond the buffer boundaries in memory when processing the size parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the p_compare_mnt function in the linux-astra-modules kernel module allows a hacker to access confidential data and also trigger a service failure.

The vulnerability of the pcomparemnt function in the Linux-astra-modules kernel module is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerability of the pdpmlrl_obstack_printf function in the PARSEC security subsystem allows a attacker to gain access to confidential data and also cause a service failure.

The vulnerability of the pdpmlrlobstackprintf function in the PARSEC security subsystem is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

The vulnerability of the `parsec inode_getsecid` function in the Linux-astra-modules kernel module, which allows a hacker to cause a service failure.

The vulnerability of the parsec inodegetsecid function in the linux-astra-modules kernel module is related to improper memory release after its use. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the macid utility in the PARSEC security subsystem allows a hacker to induce a service failure.

The vulnerability of the macid utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cap_free function in the PARSEC security subsystem, which allows a intruder to trigger a service failure

The vulnerability of the capfree function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-37124

A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruptio...

CVE-2025-37128

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2025-37124

The CVE-2025-37124 entry concerns HPE Aruba Networking EdgeConnect SD-WAN Gateways. Connected sources describe vulnerabilities in the device’s command-line interface (CLI) and Web API that could allow authenticated attackers to execute arbitrary system commands with root access, gain shell access...