11045 matches found
Linux DRM AMD Display Kernel DoS
The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux DRM AMD Display Kernel DoS
The vulnerability of the DRM/amd/display components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux DRM/Nouveau Kernel Code Execution
The vulnerability of the DRM/Nouveau components of the Linux operating system is related to a significant loss of importance in the function nouveaugemprimeimportsgtable. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux DRM/bridge DoS
The vulnerability of DRM/bridge components in the Linux operating system is related to the pointer to NULL. Exploiting this vulnerability can allow a hacker to trigger a service failure...
SUSE: Security Advisory (SUSE-SU-2024:2185-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Firefox + custom elements + iframes bug
Over at Shopify we've been building a bunch of web components to use internally and in third party contexts. All of a sudden, we found some strange errors in our logs, all from Firefox. This is the post I wish existed when we discovered it. Update: This is now fixed, and should land in Firefox 15...
ICU DoS
The vulnerability of ICU components in MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Linux kernel mlx5 DoS
The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux IB/core Component DoS
The vulnerability of Linux operating system’s IB/core components is related to the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-24869
SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML fil...
CVE-2025-24869 Information Disclosure vulnerability in SAP NetWeaver Application Server Java
SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML fil...
CVE-2025-24869 Information Disclosure vulnerability in SAP NetWeaver Application Server Java
SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML fil...
Malware in digitalexp-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Azure Linux 3.0 Security Update: cri-tools / docker-buildx / kubernetes / opa / prometheus (CVE-2023-45142)
The version of cri-tools / docker-buildx / kubernetes / opa / prometheus installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45142 advisory. - OpenTelemetry-Go Contrib is a collection of third-party...
Azure Linux 3.0 Security Update: cloud-hypervisor / edk2 / hvloader / openssl / rust (CVE-2023-0286)
The version of cloud-hypervisor / edk2 / hvloader / openssl / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0286 advisory. - There is a type confusion vulnerability relating to X.400 addres...
Denial of Service Vulnerability in Various festo Products
MSE6-D2M-5000-CBUS-S-RG-BAR-VCB-AGD,MSE6-E2M-5000-FB13-AGD,MSE6-E2M-5000-FB37-AGD and so on are industrial control components. A denial of service vulnerability exists in several festo products, which can be exploited by attackers to gain control of a server...
CVE-2025-20906
Improper Export of Android Application Components in Settings prior to SMR Feb-2025 Release 1 allows local attackers to enable ADB...
RHEA-2024:5245 Red Hat Enhancement Advisory: Release of components for RHOSO 18.0
Bulletin has no description...
Malware in ing-feat-oct-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...