The vulnerability of the ceph_handle_caps() function in the fs/ceph/caps.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.

The vulnerability of the cephhandlecaps function in the fs/ceph/caps.c module of the Linux kernel’s file system support module is related to the lack of encryption measures for sensitive data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f2fs_setattr() function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems allows a attacker to compromise the integrity of protected information.

The vulnerability of the f2fssetattr function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

The vulnerability of the Network File System (NFS) of the PowerScale OneFS operating system, which allows a hacker to compromise the integrity of the protected information.

The vulnerability of the Network File System NFS of the PowerScale OneFS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the afs_put_server() function in the fs/afs/server.c module of the Andrew file system support module for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the afsputserver function in the fs/afs/server.c module of the Andrew file system support module in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to insufficient access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

CVE-2025-30281

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this...

CVE-2025-27738

Improper access control in Windows Resilient File System ReFS allows an authorized attacker to disclose information over a network...

CVE-2025-29824

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-3364

The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system...

Path Traversal

tar-fs is vulnerable to Path Traversal. The vulnerability is due to improper validation of symbolic links and pathnames during tar file extraction, which allows attackers to escape the target extraction directory and write files to arbitrary locations on the file system...

PT-2025-16019 · Crates.Io · Surrealdb

An authenticated system user at the root, namespace, or database levels can use the DEFINE ANALYZER statement to point to arbitrary file locations on the file system, and should the file be tab separated with two columns, the analyzer can be leveraged to exfiltrate the content. This issue was...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the NTFS file system of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

USN-7428-2 linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

CVE-2025-31171

File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Adobe Patches 11 Critical ColdFusion Flaws Amid 30 Total Vulnerabilities Discovered

Adobe has released security updates to fix a fresh set of security flaws, including multiple critical-severity bugs in ColdFusion versions 2025, 2023 and 2021 that could result in arbitrary file read and code execution. Of the 30 flaws in the product, 11 are rated Critical in severity -...

Patch Tuesday, April 2025 Edition

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft's most-dire "critical" rating, meaning malware or malcontents could...

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to elevate their privileges to a system-level level.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their system-level privileges...