54806 matches found
The vulnerability of Mozilla Firefox and Firefox Focus’ user interfaces allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of Mozilla Firefox and Firefox Focus user interfaces is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of the software for BLU-IC2 and BLU-IC4 network controllers stems from the presence of a vulnerability in the borrowed component. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the BLU-IC2 and BLU-IC4 network controllers’ software is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...
The vulnerability of the crtcdebugfs_init() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dmdebugfs.c driver module of the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the crtcdebugfsinit function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver module of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems is related to the lack of memory release after the effective lifespan ...
The vulnerability of the __nvmet_reqComplete() function in the drivers/nvme/target/core.c module of the Linux NVME kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nvmetreqComplete function in the drivers/nvme/target/core.c file of the Linux kernel’s NVME support module is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2025-63434: Download of Code Without Integrity Check
The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code without performing a cryptographic integrity or authenticity check on their contents. An attacker who can control th...
PT-2025-47960
Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability...
PT-2025-47923
Name of the Vulnerable Software and Affected Versions Fluent Bit versions affected versions not specified Description The in http, in splunk, and in elasticsearch input plugins in Fluent Bit do not properly sanitize tag key inputs. An attacker who can access the network or write records to Splunk...
CVE-2025-63434
The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code without performing a cryptographic integrity or authenticity check on their contents. An attacker who can control th...
Code-Projects Blog Site 授权问题漏洞
Blog Site is a blogging system. Blog Site suffers from an improper authorization vulnerability that originates in the file /admin.php, which can be exploited by an attacker to compromise confidentiality, integrity, and availability...
CVE-2025-63434
The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code without performing a cryptographic integrity or authenticity check on their contents. An attacker who can control th...
EUVD-2025-198965
The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code without performing a cryptographic integrity or authenticity check on their contents. An attacker who can control th...
Linux Distros Unpatched Vulnerability : CVE-2025-0033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a lo...
CVE-2025-63434
The Xtooltech Xtool AnyScan Android Application (version 4.40.40 and prior ) contains an insecure update mechanism. The application downloads and extracts update packages containing executable code without performing cryptographic integrity or authenticity checks . An attacker capable of controll...
Linux Distros Unpatched Vulnerability : CVE-2025-29934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data...
CVE-2025-52539: Stack-based Buffer Overflow
A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...
EUVD-2025-198507
A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...
Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update
An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.3.7 is now available. See the documentation for bug fix information:...
CVE-2025-64767
hpke-js is a Hybrid Public Key Encryption HPKE module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal calls. This can lead to complete loss of Confidentiality...
