Poppler PDF Rendering Library DoS

The vulnerability of the Pdfinfo component in the Poppler PDF rendering library is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

MOTIVITY XSS

The vulnerability of the HR platform MOTIVITY is related to deficiencies in the validation of data entered by users. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute cross-site scripting attacks XSS...

(0Day) Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the flatten, min, max, mean, and median functions when processing deeply nested or cyclic data structures. An attacker can cause the application to crash by supplying maliciously...

TP-Link TL-WR940N V6 DoS

The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

DGN2200v4 Code Execution

The vulnerability of the embedded software for DGN2200v4 lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

RUGGEDCOM ROS Ethernet Switch DoS

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux mm/userfaultfd.c DoS

The vulnerability of the mm/userfaultfd.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service failures...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SUSE-SU-2025:4335-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2025-10921: lack of proper validation of user-supplied data when parsing HDR files can lead to RCE bsc1250496...

loongson2_clk_probe Heap Buffer Overflow DoS

Vulnerability of the loongson2clkprobe function in the drivers/clk/clk-loongson2.c module – The Linux kernel programming synchronization driver has a vulnerability related to copying buffers without checking input data. Exploiting this vulnerability could allow an attacker to cause system failure...

CVE-2025-14006

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field=add=site=1=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to cross site...

abrt security update

2.10.9-25.0.1 - Replaces sosreport to sos report in sosreport-event.conf Orabug: 38590929 - abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm Orabug: 34184473 - Disable autoreporting on Oracle Linux Orabug: 32890748 - Add orabug32082455-Upstreamreferenceinpython3-abrt-addon.patch Orabug: 32082455 ...

EUVD-2025-201188

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

CVE-2025-14006

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

CVE-2025-14006

CVE-2025-14006 affects dayrui XunRuiCMS up to version 4.7.1. The vulnerability lies in the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1, where manipulating the argument data[name] enables cross-site scripting. The issue is exploitable remotely and the public exploit has been ...

CVE-2025-14006 dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

Framework Component DoS

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Wi-Fi DoS

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service failures...