CVE-2025-27039: Detection of Error Condition Without Action

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request...

Ivanti API Settings

Binary data ivantisettings.nbin...

CVE-2025-47354: Use After Free

Memory corruption while allocating buffers in DSP service...

BBOT 安全漏洞

BBOT is a recursive Internet scanner open-sourced by Black Lantern Security. BBOT suffers from a security vulnerability that stems from a maliciously formatted git URL that could lead to the disclosure of GitLab API keys to an attacker-controlled server...

CVE-2025-39957: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: increase scanieslen for S1G Currently the S1G capability element is not taken into account for the scanieslen, which leads to a buffer length validation failure in ieee80211prephwscan and subsequent WARN in...

CVE-2025-36225: Observable Discrepancy

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data...

CVE-2025-47347: Stack-based Buffer Overflow

Memory corruption while processing control commands in the virtual memory management interface...

CVE-2025-47341: Buffer Copy without Checking Size of Input

memory corruption while processing an image encoding completion event...

BBOT 安全漏洞

BBOT is an open source recursive internet scanner from Black Lantern Security. BBOT has a security vulnerability that stems from a malicious git repository that could lead to command execution...

CVE-2025-27045: Buffer Over-read

Information disclosure while processing batch command execution in Video driver...

CVE-2025-59246: Missing Authentication for Critical Function

Azure Entra ID Elevation of Privilege Vulnerability...

CVE-2025-35062: Incorrect Default Permissions

Newforma Info Exchange NIX before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to exploit additional vulnerabilities that require authentication...

CVE-2025-27049: Buffer Over-read

Transient DOS while processing IOCTL call for image encoding...

CVE-2025-47340: Out-of-bounds Write

Memory corruption while processing IOCTL call to get the mapping...

CVE-2025-9970: Cleartext Storage of Sensitive Information in Memory

Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21...

CVE-2025-10635: Undefined Security Weakness

The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks...

CVE-2025-48464: Exposure of Sensitive Information to an Unauthorized Actor

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information...

CVE-2025-36636: Improper Access Control

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...

Wapiti Web Application Vulnerability Scanner 3.2.6

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

Linux Distros Unpatched Vulnerability : CVE-2022-50501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: coda: Add check for dcodairamalloc As the codairamalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL...