drm_mode_page_flip_ioctls Buffer Overflow DoS

Vulnerability of the drmmodepageflipioctls function in the drivers/gpu/drm/drmplane.c module – The Linux kernel’s Direct Rendering Infrastructure DRI driver has vulnerabilities related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

PT-2025-34390

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's vdpa/mlx5 component related to the release of uninitialized resources during error handling. Specifically, the mlx5 vdpa destroy mr resources and ml...

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when processing cleanup to free resources during a subsystem reboot...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2025-28054 · Undefined · Undefined

CVE-2025-0654 Rejected reason https://t.co/bkRtGoOT8j Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...

CVE-2023-50786

CVE-2023-50786 affects Dradis 4.16.0 and earlier, where references to external HTTPS images are allowed instead of forcing embedded images. This can enable an authorized author to attempt theft of Net-NTLM hashes from other authors on a Windows domain network. Remediation: upgrade to a version th...

CVE-2025-5953

The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajaxinsertemployee and updateempoyee functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $POST'role' and, after basic cleaning via...

Linux kernel Filesystem F2FS DoS

The vulnerability in the fs/f2fs/file.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

FreeScout support service management system DoS

The vulnerability of the FreeScout support service management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to cause a service failure...

CVE-2025-7070: Allocation of Resources Without Limits or Throttling

A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component MFA Pairing Request Handler. The manipulation leads to allocation of resources. The attack needs to be done within the local...

We Urgently Need Privilege Management in MCP: a Measurement of API Usage in MCP Ecosystems

The Model Context Protocol MCP has emerged as a widely adopted mechanism for connecting large language models to external tools and resources. While MCP promises seamless extensibility and rich integrations, it also introduces a substantially expanded attack surface: any plugin can inherit broad...

Linux kernel DoS

The vulnerability of the fs/exec.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Mellanox mlx5 DoS

The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2025-38141

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

CVE-2025-38141 dm: fix dm_blk_report_zones

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

SUSE-SU-2025:02214-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2025-46701: Refactored CGI servlet to access resources via WebResources bsc1243815. - CVE-2025-48988: Limited the total number of parts in a multi-part request and limits the size of the headers provided with each part bsc1244656. -...

qcom-pmic Component DoS

The vulnerability of the hdrlen/txbuflen arguments of the qcom-pmic component in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

GitLab GraphQL API DoS

The vulnerability of the GraphQL API interface of a software platform based on Git for collaborative code development on GitLab is related to unlimited resource distribution. Exploiting this vulnerability allows an attacker, operating remotely, to cause service failures by sending specially craft...

GNU Screen Socket Component DoS

The vulnerability of the socket.c component of the GNU Screen terminal manager is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause a service failure...