CVE-2025-497037

creationtimestamp| type| source ---|---|--- 2025-07-08 16:24:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215 2025-07-19 09:40:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215...

MINI-73QH-2HQ7-VR8M

Bulletin has no description...

MINI-MRQG-MW4V-PQQC

Bulletin has no description...

MINI-GCVH-XJCV-W237

Bulletin has no description...

CVE-2022-29279

Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: versi...

CVE-2022-29278

Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory. This issue was discovered by Insyde during security review. Fixed in: Kernel 5.1: Version...

CVE-2022-29275

In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: versi...

CVE-2022-33982

DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. DMA attacks on the parameter buffer used by the software SMI handler used by the driver Int15ServiceSmm could lead to a TOCTOU...

CVE-2022-33986

DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could lead to a TOCTOU attack. DMA attacks on the parameter buffer used by the software SMI handler used by the driver VariableRuntimeDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption...

CVE-2022-30771

Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in:...

CVE-2022-29276

SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.18 Kernel 5.1: version 05.17.18...

CVE-2022-30774

DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used a TOCTOU attack DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checke...

CVE-2025-29979

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 23:31:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16273...

CVE-2025-30385

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 22:30:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16267...

CVE-2025-4488

creationtimestamp| type| source ---|---|--- 2025-05-09 20:26:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15846 2025-05-09 22:06:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lorber5ptfi2 2025-05-09...

CVE-2025-14343

creationtimestamp| type| source ---|---|--- 2025-05-06 14:49:58+00:00| seen| https://gist.github.com/chrispatrick/ef9adba1d09172543266af24c83130a8 2025-05-15 15:33:07+00:00| seen| https://gist.github.com/chrispatrick/23906e07438c80d1d0b1225f644927de 2026-02-26 13:16:52+00:00| seen|...

GHSA-7XQ5-54JP-2MFG Rasa Pro Missing Authentication For Voice Connector APIs

Vulnerability A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticate...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: azurefile-csi, thanos, ip-masq-agent, wuzz, redis-operator-fips, crossplane-provider-aws, hydra, cni-plugins-fips, kubernetes-csi-livenessprobe-fips, witness, nuclei, grafana-operator, rancher-telemetry, tkn-fips, volume-modifier-for-k8s-fips, argo-events,...

GHSA-5C3C-54FJ-WG2V vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2025-1146

CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...