CVE-2025-0132 Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

CVE-2025-46739

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...

CVE-2025-47292 Cap Collectif vulnerable to insecure deserialization leading to remote code execution

Cap Collectif is an online decision making platform that integrates several tools. Before commit 812f2a7d271b76deab1175bdaf2be0b8102dd198, the DebateAlternateArgumentsResolver deserializes a Cursor, allowing any classes and which can be controlled by unauthenticated user. Exploitation of this...

Arbitrary Command Injection

Craft CMS is vulnerable to Arbitrary Command Injection. The vulnerability is due to unauthenticated user-supplied data being stored in session files without validation, potentially allowing PHP code injection into a predictable server file path...

CVE-2025-20062

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20046

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

DEBIAN-CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-22892

Uncontrolled resource consumption for some OpenVINO™ model server software maintained by IntelR before version 2024.4 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-20076

CVE-2025-20076 affects Intel® Tiber™ Edge Platform Edge Orchestrator prior to version 24.11. The issue is improper access control that could allow an unauthenticated user to escalate privileges via adjacent access. Intel advisories and Red Hat/NVD entries confirm the affected product and general ...

CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20026

CVE-2025-20026 relates to an out-of-bounds read in Intel® PROSet/Wireless WiFi Software for Windows prior to version 23.100. The root cause is an out-of-bounds read that could allow an unauthenticated user to cause a denial of service via adjacent access. Documented affected products include vari...

CVE-2025-20012

CVE-2025-20012 affects certain Intel Core Ultra processors and is due to an incorrect behavior order that could allow an unauthenticated user to disclose information with physical access. The connected advisories confirm this is addressed via an Intel microcode update (e.g., intel-microcode) and ...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20006

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

PT-2025-21112 · Intel · Intel Tiber Edge Platform Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator software affected versions not specified Description: The issue is related to improper access control in the Edge Orchestrator software for IntelR Tiber™ Edge Platform. This may allow an...