13891 matches found
UBUNTU-CVE-2025-41244
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...
Path Traversal (Arbitrary Write) in Jira Software Data Center and Server
This High severity Path Traversal Arbitrary Write vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal Arbitrary Write vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem...
H2O Flow Unauthenticated Access
H2O Flow is an open-source user interface for H2O, an open-source, distributed and scalable machine learning and predictive analytics platform. By default, H2O Flow does not require authentication to access the application. This allows an attacker to access sensitive data. This detection is...
CVE-2025-21476
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
CVE-2025-27077
Memory corruption while processing message in guest VM...
CVE-2025-47315
Memory corruption while handling repeated memory unmap requests from guest VM...
ALSA-2025:16823 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled CVE-2025-26465 For more...
ML-Logger path traversal vulnerability
ML-Logger is a logger, server and visualization dashboard for machine learning projects by Ge Yang Personal Developer. A path traversal vulnerability exists in ML-Logger acf255bade5be6ad88d90735c8367b28cbe3a743 and prior versions, which stems from a misbehavior of the loghandler function in the...
ML-Logger security vulnerability
ML-Logger is a logger, server and visualization dashboard for machine learning projects by Ge Yang Personal Developer. A security vulnerability exists in ML-Logger acf255bade5be6ad88d90735c8367b28cbe3a743 and prior versions, which stems from an incorrect manipulation of the parameter data of the...
GO-2025-3971 DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly
DragonFly vulnerable to arbitrary file read and write on a peer machine in d7y.io/dragonfly...
CVE-2025-27077
Memory corruption while processing message in guest VM...
CVE-2025-47315
Memory corruption while handling repeated memory unmap requests from guest VM...
CVE-2025-27032
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency...
CVE-2025-21476
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
CVE-2025-47315 Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM...
CVE-2025-47315 Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM...
CVE-2025-47315
CVE-2025-47315: Memory corruption in Qualcomm chipset virtualization components when handling duplicate memory unmap requests from a guest VM. Affected: Qualcomm chipsets; root cause is repeated unmap handling leading to memory corruption. Impact per the entry: high in confidentiality, integrity,...
CVE-2025-27077 Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM...
CVE-2025-27077
CVE-2025-27077 pertains to memory corruption in Qualcomm chipsets when processing messages in a guest VM. The vulnerability affects the guest/VMM interaction, with the underlying cause described as memory corruption during message handling inside the VM. CVSS 3.1 vector indicates Local attack vec...