CVE-2025-37727: Insertion of Sensitive Information into Log File

Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...

CVE-2025-52634: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0...

Exploit for Use After Free in Redis

CVE-2025-49844 RediShell Vulnerability Scanner Описание...

CVE-2025-47338: Untrusted Pointer Dereference

Memory corruption while processing escape commands from userspace...

CVE-2025-27060: Untrusted Pointer Dereference

Memory corruption while performing SCM call with malformed inputs...

CVE-2025-27054: Out-of-bounds Write

Memory corruption while processing a malformed license file during reboot...

CVE-2025-47355: Out-of-bounds Write

Memory corruption while invoking remote procedure IOCTL calls...

Ivanti Data Collection

Binary data ivanticollect.nbin...

CVE-2025-47349: Use of Out-of-range Pointer Offset

Memory corruption while processing an escape call...

CVE-2025-59271: Improper Authorization

Redis Enterprise Elevation of Privilege Vulnerability...

CVE-2025-59218: Improper Access Control

Azure Entra ID Elevation of Privilege Vulnerability...

CVE-2025-59247: Improper Privilege Management

Azure PlayFab Elevation of Privilege Vulnerability...

CVE-2025-47351: Integer Overflow or Wraparound

Memory corruption while processing user buffers...

CVE-2025-27059: Use of Out-of-range Pointer Offset

Memory corruption while performing SCM call...

CVE-2025-47342: Use After Free

Transient DOS may occur when multi-profile concurrency arises with QHS enabled...

CVE-2025-27040: Improper Input Validation

Information disclosure may occur while processing the hypervisor log...

CVE-2025-27041: Buffer Over-read

Transient DOS while processing video packets received from video firmware...

CVE-2025-11573: Improper Validation of Syntactic Correctness of Input

An infinite loop issue in Amazon.IonDotnet library versions...

CVE-2025-27048: Untrusted Pointer Dereference

Memory corruption while processing camera platform driver IOCTL calls...

CVE-2025-27039: Detection of Error Condition Without Action

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request...