19290 matches found
SAP Patches Critical NetWeaver (CVSS Up to 10.0) and High-Severity S/4HANA Flaws
SAP on Tuesday released security updates to address multiple security flaws, including three critical vulnerabilities in SAP Netweaver that could result in code execution and the upload arbitrary files. The vulnerabilities are listed below - CVE-2025-42944 CVSS score: 10.0 - A deserialization...
PT-2025-37106
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.11 through 18.3.2 Description An issue has been discovered in GitLab CE/EE that allows authenticated users to make unintended internal requests through proxy environments by injecting crafted sequences. The vulnerabili...
SUSE CVE-2025-38731
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vmbindioctl double free bug If the argument check during an array bind fails, the bindops are freed twice as seen below. Fix this by setting bindops to NULL after freeing...
AZL-67095 CVE-2025-8277 affecting package libssh for versions less than 0.10.6-4
A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...
DEBIAN-CVE-2025-8277
A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...
CVE-2025-8277 Libssh: memory exhaustion via repeated key exchange in libssh
A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...
CVE-2025-59016 Information Disclosure via File Abstraction Layer
Error messages containing sensitive information in the File Abstraction Layer in TYPO3 CMS versions 9.0.0-9.5.54, 10.0.0-10.4.53, 11.0.0-11.5.47, 12.0.0-12.4.36, and 13.0.0-13.4.17 allow backend users to disclose full file paths via failed low-level file-system operations...
CVE-2025-59016
TYPO3 CMS exposes an information-disclosure vulnerability (CVE-2025-59016) where error messages from the File Abstraction Layer disclose full file paths via failed low-level file-system operations. Affected versions include 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–...
PT-2025-36692
Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 9.0.0 through 9.5.54 TYPO3 CMS versions 10.0.0 through 10.4.53 TYPO3 CMS versions 11.0.0 through 11.5.47 TYPO3 CMS versions 12.0.0 through 12.4.36 TYPO3 CMS versions 13.0.0 through 13.4.17 Description: The File Abstraction...
PT-2025-39836
Name of the Vulnerable Software and Affected Versions VMware Aria Operations affected versions not specified Description VMware Aria Operations has an information disclosure issue due to insecure resource initialization. An attacker operating remotely may be able to reveal sensitive information. ...
MONAI 安全漏洞
MONAI is a medical imaging AI toolkit open-sourced by Project MONAI. A security vulnerability exists in MONAI 1.5.0 and earlier versions, which stems from mishandling of the pickleoperations function and could lead to a deserialization vulnerability and code execution...
ANGLE Library Code Execution
The vulnerability of the ANGLE library in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through specially crafted WebGL or Canvas operations...
CVE-2025-58757
MONAI 1.5.0 and earlier are affected by an unsafe deserialization vulnerability in monai/data/utils.py: pickle_operations deserializes dictionary values with a specific suffix using pickle.loads() without validation, enabling arbitrary code execution. The CVE describes potential RCE confirmed by ...
SUSE CVE-2025-38735
In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown is called. shutdown is invoked during system shutdown to stop DMA operations without performing expensive deallocations. ...
Shaping the Future of Cyber Risk Management: QSC Evolves to ROCon
Over the last year, I’ve had the privilege of meeting with thousands of CIOs, CISOs, and security leaders across the globe. What I hear repeatedly is clear: managing cyber risk is more complex than ever, driven by the evolving digital, threat, and regulatory landscape. The number of vulnerabiliti...
configuration management systems Replication Attack
The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of authentication checks when using transports that are not encrypted according to the TLS protocol. Exploiting this vulnerability allows a malicious actor to perform...
VirtKey Configuration Management Remote Execution
The vulnerability of the VirtKey function in the configuration management system and the ability to perform remote Salt operations are related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to circumvent established security restrictions...
Salt Configuration Management Find File Manipulation
The vulnerability of the configuration management system and remote execution of operations related to Salt is related to incorrect validation of input data for the variable tgtenv. Exploiting this vulnerability could allow an attacker to manipulate data structures...
configuration management system recv_file Remote Execution Privilege Escalation
The vulnerability of the recvfile method in the configuration management system and remote execution of Salt operations is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...
