13496 matches found
EUVD-2020-30826
ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...
OESA-2025-2775 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the...
Linux dev_fini_ggtt Heap Buffer Overflow DoS
The vulnerabilities of the functions devfiniggtt and xeggttinitearly drivers/gpu/drm/xe/xeggtt.c in the Linux kernel are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to cause service failures...
CVE-2020-36878: External Control of File Name or Path
ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...
PT-2025-49272
ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...
CVE-2025-66418: Allocation of Resources Without Limits or Throttling
urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...
EUVD-2024-55300
Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager DSM before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote authenticated users to obtain privileges witho...
CVE-2024-5401
Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager DSM before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote authenticated users to obtain privileges witho...
Video-Related System Module HarmonyOS DoS
The vulnerability of the Video-Related System module in the HarmonyOS operating system is related to synchronization errors when using shared resources “Race Situation”. Exploiting this vulnerability can allow attackers to cause service failures...
Linux bpf ktls Data Compromise
The vulnerability of the bpf and ktls components in the Linux operating system’s kernel is related to the use of uninitialized resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of the protected information...
Synology DiskStation Manager and Synology Unified Controller security vulnerabilities
Synology DiskStation Manager DSM and Synology Unified Controller are both products of Synology, a Chinese company.Synology DiskStation Manager is an operating system for use on networked storage servers NAS. Synology DiskStation Manager is an operating system used on network storage servers NAS t...
BIT-ACTIVEMQ-2021-21349 A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is...
xorg: xwayland: Use-after-free in Xkb client resource removal
A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...
AMD DRI Driver Heap Buffer Overflow DoS
The vulnerability in determining the structure of debugdefaultsdrv in the drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35resource.c file affects Linux kernel-based AMD graphics cards. This vulnerability is related to synchronization errors when using a shared resource. Exploiting this...
Linux kernel Memory Management Heap Buffer Overflow DoS
The vulnerability of the mfillatomic function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Memory Management Buffer Overflow DoS
The vulnerability of the memfdpinfolios function in the mm/gup.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Intel Xeon DoS
The vulnerability of Intel Xeon processor microprogramming software is related to the absence of references to actively allocated resources. Exploiting this vulnerability allows attackers to trigger service failures...
cros_ec_uart_probe Heap Buffer Overflow DoS
The vulnerability of the crosecuartprobe function in the drivers/platform/chrome/crosecuart.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Perforce BlazeMeter Jenkins Plugin security vulnerabilities
Perforce BlazeMeter Jenkins Plugin is a plugin from Perforce USA. A security vulnerability exists in Perforce BlazeMeter Jenkins Plugin versions prior to 4.27, which stems from improper privilege control and could lead to unauthorized access to a list of sensitive resources...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the tracingmapinsert function in the kernel/trace/tracingmap.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...