54806 matches found
kernel: ice: ice_adapter: release xa entry on adapter allocation failure
A NULL pointer dereference exists in the Linux kernel such that ice: iceadapter fails to release a reserved XArray entry when iceadapternew fails. As a result, subsequent insertions at the same index may return -EBUSY, which can lead to damage to system availability, integrity, and confidentialit...
kernel: wifi: cfg80211: fix use-after-free in cmp_bss()
A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...
kernel: wifi: cfg80211: fix use-after-free in cmp_bss()
A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...
openjdk: Enhance certificate handling (Oracle CPU 2025-10)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracl...
Grav 路径遍历漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from a path traversal vulnerability that stems from a path traversal sequence that causes an account YAML file to write to the wrong path. An...
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a perpetrator to execute arbitrary code, cause system failures, or gain unauthorized access to protected information.
The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems is related to improper verification of integrity values. Exploiting this vulnerability can allow attackers to execute arbitrary code, cause service failures, or gain unauthorized acce...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...
The vulnerability of the FortiMail email protection system, related to the failure to implement measures to neutralize CRLF sequences, allows attackers to compromise the integrity of the protected information.
The vulnerability of the FortiMail email security system is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
The vulnerability of the fromPptpUserSetting() function in the Tenda CH22 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromPptpUserSetting function in the Tenda CH22 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the delno parameter. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...
kernel security update
5.14.0-611.11.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...
The vulnerability of the command-line interface (CLI) of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system, allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the command-line interface CLI of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system are related to insecure privilege management. Exploiting this vulnerability could allow an attacker to...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM Spectrum Control
Summary Vulnerabilities in IBM® SDK, Java™ Technology Edition may affect IBM Spectrum Control which could allow a remote attacker to cause high confidentiality impact and high integrity impact. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64315
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64315
CVE-2025-64315 concerns a configuration defect in Huawei HarmonyOS, specifically in the file management module. The available sources describe a configuration flaw that can affect the confidentiality and integrity of application data if exploited. The documents do not provide concrete technical d...
