CVE-2025-42883 Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)

Migration Workbench DX Workbench in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low...

PT-2025-46417

Name of the Vulnerable Software and Affected Versions IntelR PresentMon versions prior to 2.3.1 Description The software has default permissions that, in some cases, may allow for an escalation of privilege. An unprivileged software adversary with an authenticated user and a high complexity attac...

PT-2025-46239

Name of the Vulnerable Software and Affected Versions SAP S/4HANA affected versions not specified Description An unauthenticated attacker can create malicious links. Clicking these links redirects a victim to a page controlled by the attacker. This has a low impact on the confidentiality and...

PT-2025-46230

Name of the Vulnerable Software and Affected Versions SAP Starter Solution affected versions not specified Description SAP Starter Solution allows an authenticated attacker to execute crafted database queries, potentially exposing the back-end database. This can impact the confidentiality and...

CVE-2025-42890: Use of Hard-coded Credentials

SQL Anywhere Monitor Non-GUI baked credentials into the code,exposing the resources or functionality to unintended users and providing attackers with the possibility of arbitrary code execution.This could cause high impact on confidentiality integrity and availability of the system...

SAP HANA 代码注入漏洞

SAP HANA is a set of high-performance real-time data analytics platform from Germany's SAP SAP. The platform provides data query functionality to support users to query and analyze real-time business data. A code injection vulnerability exists in SAP HANA that stems from insufficient validation o...

CVE-2025-42886: Improper Neutralization of Input During Web Page Generation

Due to a Reflected Cross-Site Scripting XSS vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input is processed during web page generation, resulting in...

ROS-20251111-11

Vulnerability of function ffaacsearchfortns in component libavcodec/aacenctns.c of multimedia library FFmpeg is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an intruder acting remotely to gain unauthorized access to protected...

Stale Translation Lookaside Buffer (TLB) Entry Vulnerability

Summary An internally reported microcode bug in some EPYC™ AMD CPUs could allow a local admin-privileged attacker to run SEV-SNP Secure Encrypted Virtualization - Secure Nested Paging guests using stale TLB entries. This bug could allow SNP active vCPUs to reuse TLB entries from other virtual...

PT-2025-46227

Name of the Vulnerable Software and Affected Versions SAP Business Connector affected versions not specified Description A Reflected Cross-Site Scripting XSS issue exists in SAP Business Connector. An unauthenticated attacker can create a malicious link and distribute it. If a user accesses this...

SAP Solution Manager 代码注入漏洞

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

CVE-2025-42883: Unrestricted Upload of File with Dangerous Type

Migration Workbench DX Workbench in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious file into the system. This results in a low...

PT-2025-46413

Name of the Vulnerable Software and Affected Versions Intel UEFI reference platforms affected versions not specified Description The kernel on some Intel UEFI reference platforms contains debug code that may allow a denial of service and escalation of privilege. A system software adversary with...

PT-2025-46397

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw due to unrestricted file upload of a dangerous type within Ring 3 User Applications. This could allow an unprivileged software adversary, combin...

Advisory ROSA-SA-2025-3076

Software: openssh 8.0p1 OS: ROSA Virtualization 3.0 unaffected versions = openssh-8.0p1-26.0.2.2.rv30 affected versions openssh-8.0p1-26.0.2.2.rv30 CVE-ID: CVE-2020-15778 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A vulnerability in the toremote scp.c function of the OpenSSH cryptographic security tool...

Advisory ROSA-SA-2025-3066

Software: dhcp 4.4.2 OS: ROSA Virtualization 3.0 unaffected versions = dhcp-4.4.2-19.b1.rv30 affected versions dhcp-4.4.2-19.b1.rv30 CVE-ID: CVE-2021-25217 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A software vulnerability providing the DHCP Dynamic Host Configuration Protocol service to the network is...

kernel: wifi: cfg80211: fix use-after-free in cmp_bss()

A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...

MAL-2025-50863 Malicious code in arif-nasisayur82-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7a67bf461f20d0941fae64b7328e89a889b4d5fee11e026a6b8cb330c954ec The package arif-nasisayur82-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

The vulnerability of the DSP microprogramming software service in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Windows Compute microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows Compute microprogramming system components in Qualcomm’s embedded chips relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...