NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the IdentityProvider service. An attacker can gain unauthorized access to modify or delete registered identity providers by leveraging low-level privileges, potentially resulting in account takeover or service...

The vulnerability of the smb2_read() function in the fs/smb/server/smb2pdu.c module of the SMB subsystem in the Linux operating system allows a remote attacker to cause a service failure.

The vulnerability of the smb2read function in the fs/smb/server/smb2pdu.c module of the SMB subsystem in the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a remote attacker to cause service...

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

The vulnerability of the extent_fiemap() function in the fs/btrfs/extent_io.c module of the Btrfs file system support in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the extentfiemap function in the fs/btrfs/extentio.c module of the Btrfs file system support in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pci_epfremove_cfs() function in the drivers/pci/endpoint/pci-epf-core.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pciepfremovecfs function in the drivers/pci/endpoint/pci-epf-core.c component of the Linux kernel lies in the use of memory after it has been freed. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2025-12782 Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a user's authorization in the disable function. This makes it possible for authenticated attackers,...

The vulnerability of the LZ4_decompress_fast() function in the lz4-java data compression library allows a hacker to cause a service failure and disclose confidential information.

The vulnerability of the LZ4decompressfast function in the lz4-java data compression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions and expose sensitive information...

Vulnerability of the process_isoc_td() function in the drivers/usb/host/xhci-ring.c module – The USB device driver support module of the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the processisoctd function in the drivers/usb/host/xhci-ring.c module – The driver for supporting USB devices in Linux kernels is vulnerable when an operation is performed outside of the buffer boundaries. Exploiting this vulnerability could allow a attacker to cause a service...

The vulnerability of the scsi.c component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the scsi.c component in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

Vulnerability of the function ice_dpll_init_worker() in the module drivers/net/ethernet/intel/ice/ice_dpll.c – a driver for supporting Ethernet adapter cards in Linux kernel-based operating systems, which allows an attacker to cause a service failure.

Vulnerability of the function icedpllinitworker in the module drivers/net/ethernet/intel/ice/icedpll.c – The driver for supporting Ethernet adapter cards in Linux operating systems is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability...