The vulnerability of Adminer’s database management software lies in its access control errors, which allow attackers to gain unauthorized access and modify protected information.

The vulnerability of the Adminer database management software is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

The vulnerability of the Compressor application for compressing and encoding video and audio materials on the macOS Sequoia operating system, related to access control errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Compressor application for compressing and encoding video and audio materials on the macOS Sequoia operating system is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-65957 Core Bot is Leaking Sensitive Credentials in Logs, Errors, and Messages

Core Bot Is an Open Source discord bot made for maple hospital servers. Prior to commit dffe050, the API keys SUPABASEAPIKEY, TOKEN are loaded using environment variables, but there are cases in code error handling, summaries, webhooks where configuration summaries may inadvertently leak sensitiv...

CVE-2025-65957

Core Bot (open-source Discord bot for maple hospital servers) contained an information-disclosure vulnerability prior to commit dffe050, where API keys (SUPABASE_API_KEY, TOKEN) loaded from environment variables could be exposed in configuration summaries, logs, or embeds due to incomplete redact...

runc security update

4:1.3.0-4 - rename errors.go to errorslinux.go - Related: RHEL-122400 4:1.3.0-3 - Add relevant patches to CVEs - Resolves: RHEL-122400 4:1.3.0-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122400 - Resolves: RHEL-122403 - Resolves: RHEL-122414...

The vulnerability of the Tenable Security Center platform regarding access control errors allows a hacker to bypass existing security restrictions.

The vulnerability of the Tenable Security Center platform for managing vulnerabilities and analyzing security measures is related to access control errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2025-56423

An issue in Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitive information via the login error messages...

CVE-2025-56423

A security vulnerability exists in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 , a database application for archaeology and history. A remote attacker can obtain sensitive information by leveraging login error messages (CWE-203). No information regarding...

The vulnerability of Mozilla Firefox and Firefox ESR browsers, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

The vulnerability of the sync_file_merge() function in the drivers/dma-buf/sync_file.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the syncfilemerge function in the drivers/dma-buf/syncfile.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tpm_pm_suspend() function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the tpmpmsuspend function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the binder_update_page_range() function in the drivers/android/binder_alloc.c module of the Linux kernel-based communication driver for Android operating systems allows a attacker to cause a service failure.

The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux kernel’s communication driver for Android is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the call_usermodehelper_exec() function in the kernel/umh.c module of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the callusermodehelperexec function in the kernel/umh.c module of the Linux operating system is related to errors in system configuration or settings. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the memory_failure() function in the mm/memory-failure.c module of the Linux kernel’s memory management subsystem allows a hacker to induce a service failure.

The vulnerability of the memoryfailure function in the mm/memory-failure.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-47927

Name of the Vulnerable Software and Affected Versions Austrian Academy of Sciences AW Austrian Archaeological Institute OpenAtlas version 8.12.0 Description An issue in OpenAtlas allows a remote attacker to obtain sensitive information via the login error messages. Recommendations At the moment,...

The vulnerabilities of the dqput() and dquot_init() functions in the Linux operating system’s kernel allow a hacker to cause a service failure.

The vulnerabilities of the dqput and dquotinit functions in the Linux operating system are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

EUVD-2025-198346

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use...

CVE-2025-52671

CVE-2025-52671 describes an information-disclosure vulnerability in Revive Adserver where SQL error messages reveal debugging details, enabling non-admin users to learn software, PHP, and database versions. Connected sources (CNVD, RH, EUVD, NVD, OSV, CVE/CVEList, and a HackerOne report) consiste...

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...

Revive Adserver 安全漏洞

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from an...