PT-2025-35670

Name of the Vulnerable Software and Affected Versions TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description An improper input validation issue exists in the TIGERF trustlet, potentially allowing local attackers to access protected data. Recommendations Update to SMR Apr-2023 Releas...

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2023 Release 1, which stems from improper input validation and could allo...

PT-2025-35675

Name of the Vulnerable Software and Affected Versions Galaxy Store versions prior to 4.5.53.6 Description An improper access control issue exists in Galaxy Store. A local attacker can access protected data by exploiting an exported service. Recommendations Update Galaxy Store to version 4.5.53.6 ...

JetBrains TeamCity File Information Disclosure

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the leakage of file and directory information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Foxit PDF Reader Buffer Overflow Information Disclosure

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized...

XWiki Confluence Migrator Pro Information Disclosure

The vulnerability of the XWiki Confluence Migrator Pro data migration tool is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

PT-2025-35669

Name of the Vulnerable Software and Affected Versions TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description An Access of Memory Location After End of Buffer issue exists in the TIGERF trustlet. This allows local attackers to access protected data. Recommendations Update to SMR...

CVE-2023-21478: Undefined Security Weakness

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

ROS-20250903-01

A vulnerability in the bsonstrfreev function of the libbson library of the MongoDB database management system driver C Driver is related to integer overflow. Exploitation of the vulnerability could allow an attacker to affect the integrity of protected information Vulnerability in bsonutf8validat...

CVE-2023-21477: Out-of-bounds Read

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21483: Undefined Security Weakness

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

IntelliJ IDEA Information Disclosure

The vulnerability of the IntelliJ IDEA integrated development environment is related to the transfer of critical information in open text. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This ma...

CVE-2025-52549: Insufficiently Protected Credentials

E3 Site Supervisor Control firmware version 2.31F01 generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device based on known or easy to fetch parameters...

SAP NetWeaver Enterprise Portal Deserialization

The vulnerability of the content-sharing framework between corporate portals of SAP NetWeaver Enterprise Portal and Federated Portal Network is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...

SAPCAR Buffer Overflow DoS

The vulnerability of the SAPCAR file compression and decompression utility is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-52545: Insufficiently Protected Credentials

E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...

SAP NetWeaver Deserialization

The vulnerability of the SAP NetWeaver software integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

KATYUsha M348 Disclosure Information

The vulnerability of the web control panel of the multifunctional device KATYUsha M348 is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker operating remotely to disclose the protected information...

Synology DiskStation Manager Authentication Module Certificate Validation Unauthorized Access

The vulnerability of the system-mounted authentication module in the Synology DiskStation Manager DSM is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...