The vulnerability of the stm32f7_i2c_xfer() function in the Linux kernel’s drivers/i2c/busses/i2c-stm32f7.c file allows a hacker to gain access to protected information.

The vulnerability of the stm32f7i2cxfer function in the drivers/i2c/busses/i2c-stm32f7.c module of the operating system’s kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...

The vulnerability of the xiic_xfer() function in the drivers/i2c/busses/i2c-xiic.c file of the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the xiicxfer function in the drivers/i2c/busses/i2c-xiic.c file of the Linux operating system’s kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE lies in the use of files and directories accessible from external parties, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing attackers to bypass ASLR protection and gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

The vulnerability of the drm_dp_mst_up_req_work() function in the driver drivers/gpu/drm/display/drm_dp_mst_topology.c, which supports the Direct Rendering Infrastructure (DRI) of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmdpmstupreqwork function in the driver drivers/gpu/drm/display/drmdpmsttopology.c, which is part of the Direct Rendering Infrastructure DRI support for the Linux kernel, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker...

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing attackers to bypass ASLR protection and gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

PT-2025-19324

Name of the Vulnerable Software and Affected Versions VideoPlayer2 affected versions not specified Synology Router Manager SRM affected versions not specified Description A flaw exists in VideoPlayer2 that could allow authorized remote users to read .srt subtitle files. A security issue in Synolo...

PT-2025-19322

Name of the Vulnerable Software and Affected Versions Synology Router Manager SRM affected versions not specified FileStation affected versions not specified Description A security issue exists in Synology Router Manager SRM related to insufficient protection of service data. Remote attackers may...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the NTFS file system in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition allows a hacker to bypass authentication using a user-controlled key, enabling them to disclose sensitive information that should be protected.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition relates to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability allows a malicious actor, operating remotely, to disclose sensitive...

The vulnerability of the Web page rendering module in the Safari browser of the WebKit operating systems for macOS, iOS, iPadOS, VisionOS, tvOS, and WatchOS allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Web page rendering module in Safari web browsers for macOS, iOS, iPadOS, VisionOS, tvOS, and WatchOS lies in insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to...

The vulnerability of the personal assistant Siri in operating systems such as macOS, iOS, and iPadOS allows a hacker to disclose protected information.

The vulnerability of the personal assistant Siri in operating systems such as macOS, iOS, and iPadOS is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the FileProvider framework in operating systems such as macOS, iOS, iPadOS, and visionOS allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the FileProvider framework in operating systems such as macOS, iOS, iPadOS, and visionOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the software platform for integrating Grafana Alerting VictorOps, related to information disclosure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Grafana Alerting VictorOps software platform relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

WordPress plugin WP-Recall 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

The vulnerability of the microprogramming-based BIOS software in Dell Edge Gateway 5200 and 3200 allows unauthorized access to protected information by exploiting a flaw in the software.

The vulnerability of the microprogrammed BIOS software in Dell Edge Gateway 5200 and 3200 models relates to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to the possibility of exploiting memory after it is freed. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the Google Chrome browser’s Extensions API allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Extensions API is related to errors in information representation by the user interface. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a special extension of Chrome...

The vulnerability in the form2AddVrtsrv.cgi script of the Virtual Service Handler component of the D-Link DIR-816 A2 router microprogramming system, which allows a attacker to compromise the integrity of protected information.

The vulnerability of the form2AddVrtsrv.cgi script of the Virtual Service Handler component in the D-Link DIR-816 A2 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected...

The vulnerability of the libavutil library, a multimedia library used in FFmpeg, allows attackers to disclose protected information.

The vulnerability of the libavutil library, a multimedia library within FFmpeg, relates to the lack of memory release after the effective lifespan of the library has ended. Exploiting this vulnerability can allow an attacker to disclose the protected information...