21061 matches found
VulnCheck KEV: CVE-2025-20333
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper...
PT-2025-39629
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 14.10 through 18.2.6 GitLab CE/EE versions 18.3 through 18.3.2 GitLab CE/EE versions 18.4 through 18.4.0 Description An issue exists that could allow Guest users to access sensitive information stored in virtual registry...
Zoom Workplace VDI Client < 6.3.14 Vulnerability (ZSB-25034)
The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.3.14. It is, therefore, affected by a vulnerability as referenced in the ZSB-25034 advisory. - Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of servic...
SUSE SLES15 Security Update : kernel RT (Live Patch 1 for SLE 15 SP6) (SUSE-SU-2025:03341-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03341-1 advisory. This update for the Linux Kernel 6.4.0-150600105 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs...
CVE-2025-20316
A vulnerability in the access control list ACL programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an affected device. This vulnerability is due to the flooding of traffic from an...
CVE-2025-20316
A vulnerability in the access control list ACL programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an affected device. This vulnerability is due to the flooding of traffic from an...
Retail at risk: How one alert uncovered a persistent cyberthreat
In the latest edition of our Cyberattack Series, we dive into real-world cases targeting retail organizations. With 60% of retail companies reporting operational disruptions from cyberattacks and 43% experiencing security compromises in the past year, the risks for businesses continue to increase...
CVE-2025-47315
Memory corruption while handling repeated memory unmap requests from guest VM...
CVE-2025-27077
Memory corruption while processing message in guest VM...
CVE-2025-27032
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency...
CVE-2025-21476
Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...
CVE-2025-47315 Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM...
CVE-2025-47315 Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM...
CVE-2025-47315
CVE-2025-47315: Memory corruption in Qualcomm chipset virtualization components when handling duplicate memory unmap requests from a guest VM. Affected: Qualcomm chipsets; root cause is repeated unmap handling leading to memory corruption. Impact per the entry: high in confidentiality, integrity,...
CVE-2025-27077 Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM...
CVE-2025-27077 Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM...
CVE-2025-27077
CVE-2025-27077 pertains to memory corruption in Qualcomm chipsets when processing messages in a guest VM. The vulnerability affects the guest/VMM interaction, with the underlying cause described as memory corruption during message handling inside the VM. CVSS 3.1 vector indicates Local attack vec...
CVE-2025-27032 Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency...
CVE-2025-27032 Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency...