3939 matches found
PT-2025-32744
Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processors affected versions not specified Description: An out-of-bounds write issue exists in the memory subsystem of certain IntelR XeonR 6 processors when utilizing IntelR SGX or IntelR TDX. A privileged user may be able to...
PT-2025-32757
Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 Processors affected versions not specified Description: An improperly implemented security check for standard in the DDRIO configuration may allow a privileged user to potentially enable escalation of privilege via local access...
PT-2025-32697
Name of the Vulnerable Software and Affected Versions: IntelR XeonR Processor firmware with SGX enabled affected versions not specified Description: Improper buffer restrictions in some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially escalate privileges...
PT-2025-32756 · Intel · Intel Sgx Sdk +1
Name of the Vulnerable Software and Affected Versions: Intel Edger8r Tool for some IntelR SGX SDK affected versions not specified Description: Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially escalate privileges via local...
Linux Distros Unpatched Vulnerability : CVE-2021-33135
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local...
Linux Distros Unpatched Vulnerability : CVE-2025-38282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the...
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2025-1975)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Intel® Software Guard Extensions SDK (Intel® SGX SDK) Edger8r Tool Advisory
Summary: A potential security vulnerability in the Intel Edger8r Tool for the Intel® Software Guard Extensions SDK Intel® SGX SDK may allow escalation of privilege. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-32004...
Linux Distros Unpatched Vulnerability : CVE-2025-21851
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix softlockup in arenamapfree on 64k page kernel On an aarch64 kernel with...
Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities
Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2008-1530 DESCRIPTION: GnuPG gpg 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted...
Linux Distros Unpatched Vulnerability : CVE-2019-1010022
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is:...
Linux Distros Unpatched Vulnerability : CVE-2021-47312
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix dereference of null pointer flow In the case where chain-flags &...
Linux Distros Unpatched Vulnerability : CVE-2022-49785
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgxvalidateoffsetlength sgxvalidateoffsetlength function...
Mysterious Crime Spree Targeted National Guard Equipment Stashes
A string of US armory break-ins, kept quiet by authorities for months, points to a growing security crisis—and signs of an inside job...
kernfs: Relax constraint in draining guard
...
Linux Distros Unpatched Vulnerability : CVE-2025-37855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Guard Possible Null Pointer Dereference WHY In some situations, dc-respool may be null. HOW Check if pointer is null before dereference...
Regular Expression Denial Of Service (ReDoS)
fastapi-guard is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to incomplete regex filtering due to an insufficient patch that fails to detect...
CVE-2025-54365
fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this...
CVE-2025-38459 atm: clip: Fix infinite recursive call of clip_push().
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clippush. syzbot reported the splat below. 0 This happens if we call ioctlATMARPMKIP more than once. During the first call, clipmkip sets clippush to vcc-push, and the second call copies ...
CVE-2025-54365
fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this...