11682 matches found
The vulnerability of the authentication method used by the Vault Enterprise and Vault Community Edition archiving platforms for corporate information allows a perpetrator to create malicious certificates.
The vulnerability of the authentication method used by the Vault Enterprise and Vault Community Edition archiving platforms for corporate information is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to create malicious certificates...
The vulnerability of the Managed Configuration component for macOS operating systems allows attackers to increase their privileges.
The vulnerability of the Managed Configuration component for macOS operating systems is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
UBUNTU-CVE-2025-47907
Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...
CVE-2025-47907 Incorrect results returned from Rows.Scan in database/sql
Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...
pgsql extension does not check for errors during escaping
...
CVE-2025-54640
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...
The vulnerability of the Adobe Experience Manager content and media data management system, related to configuration errors, allows a hacker to bypass existing security restrictions and execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and execute arbitrary code...
ROS-20250806-06
Vulnerability in the libxml2 XML file parsing library is related to boundary checking errors in the shell xmllint - shell.c. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system...
Linux Distros Unpatched Vulnerability : CVE-2025-38334
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the page to copy its contents to secondary storage. SGX instructions do not...
The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, and the Safari browser allows attackers to perform spoofing attacks.
The vulnerability of the Web page rendering module in WebKit operating systems for iOS, iPadOS, and the Safari browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2022-25762
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat...
redis: Redis Unauthenticated Denial of Service
A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...
Linux Distros Unpatched Vulnerability : CVE-2019-14763
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with fhid. CVE-2019-14763 Note that Ness...
redis: Redis Unauthenticated Denial of Service
A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...
redis: Redis Unauthenticated Denial of Service
A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...
redis: Redis Unauthenticated Denial of Service
A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...
redis: Redis Unauthenticated Denial of Service
A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...
Security update for redis
This update for redis fixes the following issues: CVE-2025-27151: Fixed absence of filename size check may cause a stack overflow. bsc1243804 CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed...
SUSE-SU-2025:02680-1 Security update for redis
This update for redis fixes the following issues: - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation an...