CVE-2025-22235

A flaw was found in the Spring Boot configuration. This vulnerability allows unauthorised access to the /null/ path via misconfigured security matchers when referencing disabled or non-exposed Spring Boot actuator endpoints. Mitigation Mitigation for this issue is either not available or the...

CVE-2025-32445

A flaw was found in the argo-events package. A user with the permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges...

SAP Commerce Swagger UI Interactive Console Data Compromise

The vulnerability of the Swagger UI interactive console of the SAP Commerce platform is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected...

CVE-2025-21906

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: clean up ROC on failure If the firmware fails to start the session protection, then we do call iwlmvmrocfinished here, but that won't do anything at all because IWLMVMSTATUSROCP2PRUNNING was never set. Set...

Linux tools/power/x86/turbostat/turbostat.c Heap Buffer Overflow

The vulnerability of the idxtooffset function in the tools/power/x86/turbostat/turbostat.c module of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Block permissions module Drupal Data Compromise

The vulnerability of the Block permissions module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel BPF LPM Trie Heap Buffer Overflow DoS

The vulnerability of the triegetnextkey function in the kernel/bpf/lpmtrie.c module of the Linux operating system is related to memory allocation beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

PT-2024-41136 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, нарушить целостность и доступность защищаемой информации...

Linux kernel TCP Metrics Policy Use-After-Free

The vulnerability of the tcpmetricsnlpolicy structure in the net/ipv4/tcpmetrics.c file of the Linux operating system’s IPv4 protocol implementation is related to the lack of checks on the length of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Outside In Core Component Oracle SDK Data Compromise

The vulnerability of the Outside In Core component in Oracle’s software development toolset SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

InfiniBand driver Heap Buffer Overflow DoS

The vulnerability of the irdmaGenerateFlushcompletions function in the drivers/infiniband/hw/irdma/utils.c file of the Linux kernel’s InfiniBand irdma driver is related to an infinite wait loop for resources. Exploiting this vulnerability could allow a attacker to compromise the confidentiality,...

PT-2024-5400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free error in the error handling of the gp aux bus probe function in the Linux kernel. When auxiliary device add returns an error and then calls auxiliar...

WordPress Plugin Slimstat Analytics SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Slimstat...

D-Link DIR-823G Router SetWLanRadioSecurity Buffer Overflow

The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

Java Runtime Environment Heap Buffer Overflow DoS

The vulnerability of the Java Runtime Environment software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the integrity, accessibility, and confidentiality of information...

PT-2022-3432

Name of the Vulnerable Software and Affected Versions QNAP QVR versions prior to 5.1.6 build 20220401 Description The issue is related to the QNAP QVR video surveillance system management, where it fails to neutralize special elements used in an OS command. This could allow a remote attacker to...

QEMU Hardware Emulator Heap Buffer Overflow DoS

The vulnerability in the qemu-bridge-helper.c function of the QEMU hardware emulation software is related to security vulnerabilities. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information, cause service failures, or affect the availability of information...

PDF Memory Management Data Compromise

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...

Bottle Data Compromise

The vulnerability of the WSGI Micro-Framework “Bottle” is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2020-22840

Уязвимость компонента пакета printcontrol-web связана с недостатком механизма предоставляющего разрешения, привилегии и средства управления доступом. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на доступность информации...