NTLM Hash Disclosure Spoofing Vulnerability

...

CVE-2025-1178

A flaw was found in GNU Binutils. This vulnerability allows memory corruption via manipulation of the bfdputl64 function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2025-1176

A flaw was found in GNU Binutils. This vulnerability allows a heap-based buffer overflow via the bfdelfgcmarkrsec function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

Schneider Electric EcoStruxure (Update A)

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...

Intel Graphics Software Advisory - Lenovo Support US

No description provided...

PT-2025-18398

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the backlight LED driver. The issue occurs when the led sysfs enable function is called without holding the led access...

PT-2025-6269 · Lexmark · Lexmark Print Management Client

Name of the Vulnerable Software and Affected Versions: Lexmark Print Management Client affected versions not specified Description: A Reliance on Untrusted Inputs in a Security Decision issue has been identified. This allows for potential security risks due to the reliance on untrusted inputs...

AMD GPU Security Vulnerabilities

AMD ID: AMD-SB-6016 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential security vulnerabilities in the Satellite Management Controller SMC in AMD Instinct™ MI300X accelerators were discovered during internal audit/penetration...

Last-Level Cache Attack

AMD ID: AMD-SB-7032 Potential Impact: N/A Severity: N/A Summary Researchers from Wuhan University have provided AMD with a paper titled “ZenLeak: Practical Last-Level Cache Side-Channel Attacks on AMD Zen Processors” in which they discuss prime and probe attacks targeting the Last-Level Cache LLC...

Exploit for Type Confusion in Google Chrome

CVE-2022-4174CVE-2022-41742 PoC para CVE-2022-4174CVE-2022-4...

RealTek SD Card Reader Vulnerabilities - Lenovo Support US

No description provided...

NVIDIA GPU Display Driver - January 2025 - Lenovo Support US

No description provided...

Lenovo Vantage Privilege Escalation Vulnerability - Lenovo Support US

No description provided...

Intel VPL Software and Graphics Drivers Advisory - Lenovo Support US

No description provided...

CVE-2025-21692

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan found that etsclassfromarg can index an Out-Of-Bound class in etsclassfromarg when passed clid of 0. The overflow may cause local privilege escalation. 18.852298 ------------ cut...

CVE-2025-24032

A flaw was found in the pampkcs11 Linux-PAM login module. If the certpolicy is set to none, which is the default value, then pampkcs11 will only check if the user is capable of logging into the token. This flaw allows an attacker to create a different token with the user's public data, for exampl...

CVE-2025-1149

A flaw was found in GNU Binutils. This vulnerability allows a memory leak via the xstrdup function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicabilit...

CVE-2025-1147

A flaw was found in GNU Binutils nm component. This vulnerability allows a buffer overflow via manipulation of the const argument. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of u...

CVE-2025-24031

A flaw was found in the pampkcs11 Linux-PAM login module. A segmentation fault condition may be triggered in certain versions when a user presses ctrl-c/ctrl-d when asked for a PIN. When a user does not enter a PIN, pamgetpwd will never initialize the password buffer pointer, and cleanse will try...

CVE-2025-25247

A flaw was found in the Apache Felix Webconsole. This vulnerability allows Cross-site Scripting XSS via improper neutralization of input during web page generation. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...