Google Chrome Devtools Unauthorized Access

The vulnerability of Google Chrome’s Devtools component is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

runc maskedPaths function Use-After-Free

The vulnerability of the maskedPaths function in the runc tool for running isolated containers is related to the state of the race condition, which allows for the tracking of references. Exploiting this vulnerability could enable a perpetrator to compromise the confidentiality, integrity, and...

AnyDesk Authentication Bypass

The vulnerability of AnyDesk remote access and management software relates to the bypassing of authentication processes. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...

Dell PowerScale OneFS Cryptographic Defect Disclosure

The vulnerability of the Dell PowerScale OneFS operating system lies in the use of cryptographic algorithms that contain defects. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

Extensions Component Unauthorized Access

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SuiteCRM GraphQL API Unauthorized Access

The vulnerability of the GraphQL-API interface of the SuiteCRM customer relationship management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

CVE-2025-6571: Insufficiently Protected Credentials

A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...

WebKit XSS

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of an untrusted intermediate policy file during the processing of Canvas elements. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protecte...

WebKit XSS

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Go Insufficient Validation Information Disclosure

The vulnerability of the Go programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the accessibility of protected information...

Qualcomm Execution Outside Buffer Disclosure

The vulnerability of embedded software developed by Qualcomm relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

Data Compromise Component

The vulnerability of the Accessibility component in operating systems iOS and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

SMSS Component Disclosure

The vulnerability of the SMSS component in embedded Qualcomm software systems is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to disclose protected information...

WinBlas driver Data Compromise

The vulnerability of the WinBlast driver of Qualcomm’s embedded software lies in the issue of buffer overflow attacks. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Embedded Software Array Indexing

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-37736

Improper Authorization in Elastic Cloud Enterprise can lead to Privilege Escalation where the built-in readonly user can call APIs that should not be allowed. The list of APIs that are affected by this issue is: post:/platform/configuration/security/service-accounts...

CVE-2025-46413

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker...

CVE-2025-46413

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker...

EUVD-2025-38245

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker...