Linux Distros Unpatched Vulnerability : CVE-2021-20265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way memory resources were freed in the unixstreamrecvmsg function in the Linux kernel when a signal was pending. This flaw allows an...

CVE-2025-36594

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An...

CVE-2025-36594

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An...

CVE-2025-36594

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An...

KLA86162 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2025-8010 CVE-2025-8011 Related products Microsoft-Edge CVE list CVE-2025-8010 critical CVE-2025-8011 critical Solution Install necessary...

CVE-2025-42952

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. On successful exploitation, an attacker can render the system unusable by triggering short dumps on login. Thi...

CVE-2025-47978 Windows Kerberos Denial of Service Vulnerability

...

CVE-2025-47978 Windows Kerberos Denial of Service Vulnerability

...

CVE-2025-42952

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. On successful exploitation, an attacker can render the system unusable by triggering short dumps on login. Thi...

CVE-2025-42953

SAP NetWeaver AS ABAP System Configuration is affected by CVE-2025-42953 due to missing authorization checks for authenticated users, enabling privilege escalation and potential full integrity/availability compromise (confidentiality not impacted). Root cause: inadequate access control in the Sys...

CVE-2025-42952 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. On successful exploitation, an attacker can render the system unusable by triggering short dumps on login. Thi...

CVE-2025-42952 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. On successful exploitation, an attacker can render the system unusable by triggering short dumps on login. Thi...

CVE-2025-42952

CVE-2025-42952 affects SAP Business Warehouse and SAP Plug-In Basis. An authenticated attacker can add fields to arbitrary SAP database tables/structures, potentially rendering the system unusable by triggering short dumps on login. Availability impact is High; no read/change/delete of data is in...

PT-2025-28276 · Sap · Sap Netweaver System Configuration

Name of the Vulnerable Software and Affected Versions: SAP Netweaver System Configuration affected versions not specified Description: The issue results from a lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could completely compromise t...

PT-2025-28275 · Sap · Sap Plug-In Basis +1

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse and SAP Plug-In Basis affected versions not specified Description: The issue allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. ...

undertow: special character in query results in server errors

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability...

wildfly: unsafe deserialization in Wildfly Enterprise Java Beans

A flaw was found in Wildfly. A remote deserialization attack is possible in the Enterprise Application Beans EJB due to lack of validation/filtering capabilities in wildfly. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availablity...

The vulnerability of the xe_reg_sr_add() function in the drivers/gpu/drm/xe/xe_reg_sr.c kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xeregsradd function in the drivers/gpu/drm/xe/xeregsr.c kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the il_isr() function in the net/mac80211/util.c module of the iwlegacy component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ilisr function in the net/mac80211/util.c module of the iwlegacy component of the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the amdkfd_free_gtt_mem() function in the driver /drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdkfdfreegttmem function in the driver /drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c of the Linux kernel lies in the reuse of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...