CVE-2025-22444

Exposure of resource to wrong sphere in the UEFI PdaSmm module for some IntelR reference platforms may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...

Linux SMB Server recv_done() Function Unauthenticated Access

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...

Linux kernel can_follow_write_pte can_follow_write_pmd

The vulnerability of the canfollowwritepte function mm/gup.c and canfollowwritepmd function mm/hugememory.c in the Linux kernel is related to improper handling of states during memory management. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...

Shadow copying subsystem Modification

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to modify the protected data...

VMware Workstation Heap Buffer Overflow DoS

The vulnerability of VMware Workstation’s hypervisor is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Oracle Database Server Listener Unauthorized Access

The vulnerability of the RDBMS Listener component of the Oracle Database Server management system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Moodle Insufficient Validation Unauthorized Access

The vulnerability in the virtual learning environment Moodle is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel binder_alloc_set_vma binder_alloc_init Buffer Overflow DoS

The vulnerabilities of the binderallocsetvma and binderallocinit functions in the drivers/android/binderalloc.c file of the Linux kernel’s communication driver with Android cores are related to improper initialization. Exploiting these vulnerabilities can allow a remote attacker to compromise the...

ROS-20260304-73-0029

A vulnerability in the dbMount function of the Linux kernel is related to reading memory outside of the allocated buffer. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality of protected information...

Odoo Community Edition Access Control

The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to deficiencies in access control. Exploiting these vulnerabilities can allow unauthorized individuals to gain unauthorized access to protected information...

DEBIAN-CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

iOS iPadOS Information Disclosure

The vulnerability of iOS and iPadOS operating systems is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Linux kernel File System Pick File Buffer Overflow DoS

The vulnerability of the pickfile function in the fs/file.c module of the Linux kernel file system is related to the uncontrolled use of file descriptors. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

Visual Studio Code Live Server Unauthorized Access

The vulnerability of the Live Server extension of the Visual Studio Code editor relates to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information through a specially created HTML page...

DWM Core Library Unauthorized Access

The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Vzlet SP Authorization Bypass

The vulnerability of the “Vzlet SP” software complex is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...

Vzlet SP Authorization Bypass

The vulnerability of the “Vzlet SP” software complex is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...