CVE-2025-20013: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-22843: Incorrect Execution-Assigned Permissions

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-21081: Protection Mechanism Failure

Protection mechanism failure for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20611: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20030: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-20057: Uncontrolled Resource Consumption

Uncontrolled resource consumption for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-22446: Inadequate Encryption Strength

Inadequate encryption strength for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-40582: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the...

CVE-2025-40583: Cleartext Transmission of Sensitive Information

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information...

CVE-2025-22895: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access...

Intel Tiber Edge Platform Edge Orchestrator security vulnerabilities

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. A security vulnerability exists in Intel Tiber Edge Platform Edge Orchestrator that stems from improper privilege assignment and could lead to elevated...

Intel Tiber Edge Platform Edge Orchestrator Access Control Vulnerability

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. An access control error vulnerability exists in Intel Tiber Edge Platform Edge Orchestrator that stems from improper access control and could lead to...

CVE-2025-20616: Uncontrolled Resource Consumption

Uncontrolled resource consumption for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

Microsoft Edge (Chromium-Based) Use After Free Vulnerability (May 2025)

Microsoft Edge Chromium-Based is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

On the Price of Differential Privacy for Spectral Clustering over Stochastic Block Models

We investigate privacy-preserving spectral clustering for community detection within stochastic block models SBMs. Specifically, we focus on edge differential privacy DP and propose private algorithms for community recovery. Our work explores the fundamental trade-offs between the privacy budget...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to idna-0.1.5.crate, idna-0.5.0.crate CVE-2024-12224

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to idna-0.1.5.crate, idna-0.5.0.crate CVE-2024-12224. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-12224 DESCRIPTION: idna 0.5.0 and earlier accepts Punycode...

KLA83530 DoS vulnerability in Microsoft Browser

Denial of service vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2025-4372 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2025-4372 critical K...

Microsoft Edge (Chromium) < 136.0.3240.64 (CVE-2025-4372)

The version of Microsoft Edge installed on the remote Windows host is prior to 136.0.3240.64. It is, therefore, affected by a vulnerability as referenced in the May 8, 2025 advisory. - Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially...

CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics...

Google Chrome Microsoft Edge Script Execution DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted...