zpa2326_fill_sample_buffer Heap Buffer Overflow DoS

Vulnerability of the zpa2326fillsamplebuffer function in the drivers/iio/pressure/zpa2326.c module – The driver for supporting various types of embedded sensors in the Linux operating system involves the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to...

Nuvoton NCT6775F Driver Heap Buffer Overflow

The vulnerability of the DIVROUNDCLOSEST function in the Nuvoton NCT6775F circuit driver drivers/hwmon/nct6775-core.c in the Linux operating system is related to the occurrence of operations outside the memory buffer. Exploiting this vulnerability could allow an attacker to compromise the...

Google Chrome Background Fetch Disclosure

The vulnerability of the Background Fetch API in Google Chrome browser’s software interface is related to the disclosure of information. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information through a specially created HTML page...

Apache Superset SQL Injection

The vulnerability of the Apache Superset data visualization software relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected information...

IBM Aspera Faspex Disclosure Unauthorized Action

The vulnerability of the IBM Aspera Faspex file-sharing application is related to changes in the assumed immutable data. Exploiting this vulnerability could allow a malicious actor to disclose protected information and perform unauthorized actions on behalf of another user...

Apache InLong Deserialization Unauthorized Access

The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by sending specially crafted data...

Thunderbird Path Traversal Information Disclosure

The vulnerability of the Thunderbird email client is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

PT-2025-33053

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.7 through 17.11.5 GitLab CE/EE versions 18.0 through 18.0.3 GitLab CE/EE versions 18.1 through 18.1.1 Description: The issue allows authenticated users with developer access to obtain ID tokens for protected branches...

Ribbon Communications Apollo 9608 Data Compromise

The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform lies in the use of rigidly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Apache InLong Deserialization Unauthorized Access

The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

JetBrains YouTrack Authentication Bypass

The vulnerability of the JetBrains YouTrack project and task management software lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Qualcomm Execution Outside Buffer Disclosure

The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information during the processing of RTP packets...

Citrix Secure Access Client Data Protection

The vulnerability of the Citrix Secure Access Client software for secure remote access on the Mac OS is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to and modify, or read, protected information...

Citrix Secure Access Client Uncontrolled Search Unauthorized Access

The vulnerability of the Citrix Secure Access Client software for secure remote access on the Mac OS is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to and modify, or read, protected informatio...

Zoom Workplace Cross-site Request Manipulation

The vulnerability of Zoom Workplace, a software product for conducting video conferences, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow an attacker to influence the integrity of the protected information...

FtpFileObject Class Unauthorized Access

The vulnerability of the FtpFileObject class, a common API for accessing various file systems via Apache Commons VFS, is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

XProtect Virus Detection System Unauthorized Access

The vulnerability of the XProtect virus detection system for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

GrantAccessToMultipleFiles Sandbox Bypass

The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms and...

Output: umatiGateway Firewall Access

The vulnerability of the umatiGateway firewall interface is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to gain read access and modify the protected information...