Linux net/xfrm/xfrm_state.c DoS

The vulnerability of the net/xfrm/xfrmstate.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

libwx Kernel Data Compromise

The vulnerability of the libwx component in the Linux operating system’s kernel is related to the lack of initialization for resources. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

CVE-2025-13888: Incorrect Privilege Assignment

A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources CRs that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged...

CVE-2025-14695: Improper Control of Dynamically-Managed Code Resources

A vulnerability was determined in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b. Affected is the function htmlrenderer of the file plugins/htmlrenderer/index.js of the component Inter-plugin API. Executing manipulation of the argument action can lead to dynamically-managed code...

Linux net/packet/af_packet Heap Buffer Overflow DoS

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

net/tls DoS

The vulnerability of the net/tls component in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

MySQL Server DoS

The vulnerability of the MySQL Server database management system component lies in its unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the rcupreemptdeferredqshandler function in the kernel/rcu/treeplugin.h header file of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to trigger a...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux kernel driver DoS

The vulnerability of the Linux operating system’s kernel driver relates to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

Linux Powerpc Eeh DoS

The vulnerability of the powerpc/eeh module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

PT-2025-51238

Name of the Vulnerable Software and Affected Versions OpenShift GitOps affected versions not specified Description A security issue exists in OpenShift GitOps where namespace administrators can create malicious ArgoCD Custom Resources CRs. These CRs can deceive the system into granting the...

GitLab Commits API DoS

The vulnerability of the Commits API interface of the Git-based software development platform for collaborative code editing on GitLab is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

HaloBot security vulnerabilities

HaloBot is a robotics framework by the individual developers at SNRainiar. A security vulnerability exists in HaloBot, which stems from the incorrect manipulation of the parameter action in the file plugins/htmlrenderer/index.js, which could lead to dynamically managed code resources...

Linux drivers/tty/serial/8250 DoS

The vulnerability of the drivers/tty/serial/8250 component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

Linux net/mac80211/tdls.c Component Confidential Data Compromise

The vulnerability of the net/mac80211/tdls.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

Linux kernel Synchronization Data Compromise

The vulnerability of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

Denial Of Service

Eclipse Jetty is vulnerable to Denial of Service. The vulnerability is due to improper handling of malformed or illegal HTTP/2 frames such as invalid WINDOWUPDATE frames, which allows an attacker to repeatedly trigger RSTSTREAM responses and exhaust server CPU and memory resources...

CVE-2025-14354

The Resource Library for Logged In Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to perform variou...

EUVD-2025-203050

The WP Fastest Cache plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to...