CVE-2025-5819

Removed by vendor...

ROS-20250813-09

A vulnerability in the Wi-Fi WPA Supplicantt secure access client is related to an uncontrolled element of the search path. search path element. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

GitLab Enterprise Edition and GitLab Community Edition security vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and GitLab Community...

CVE-2025-50617

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN0046ed68 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wpsset in the payload, which can cause the program to crash and potentially lead to a Denial of...

CVE-2025-5819: Incorrect Permission Assignment for Critical Resource

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances...

IBM Sterling Secure Proxy Weak Passwords

The vulnerability of the IBM Sterling Secure Proxy proxy server is related to the use of weak passwords. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

NVIDIA Triton Inference Server Heap Buffer Overflow Info Disclosure

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server previously known as TensorRT Inference Server relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose...

macOS HTTPS Unauthorized Access

The vulnerability of the HTTPS protocol’s implementation in macOS systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Oracle Applications Framework Unauthorized Access

The vulnerability of the Personalization component of the Oracle Applications Framework is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, read, and delete protected information usi...

IBM Sterling File Gateway Information Disclosure

The vulnerability of the IBM Sterling File Gateway relates to the disclosure of information through the reading of directory files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

ALPINE-CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22889

CVE-2025-22889 affects Intel Xeon 6 processors with Intel TDX. The root cause is improper handling of overlap between protected memory ranges, which may allow a privileged user to escalate privileges via local access. Publicly documented mitigations involve microcode updates (e.g., intel-microcod...

CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...

PT-2025-32719

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor with IntelR TDX affected versions not specified Description: Improper handling of overlap between protected memory ranges may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22889: Improper Handling of Overlap Between Protected Memory Ranges

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...