The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to the state of data race conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions io_write_prep() and io_write() in the kernel code of the Linux operating system’s io_uring/io_uring.c module, which allow a hacker to cause a service failure.

The vulnerabilities of the functions iowriteprep and iowrite in the Linux operating system’s iouring/iouring.c kernel are related to improper resource locking. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of the sctp_sf_ootb() function in the net/sctp/sm_statefuns.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sctpsfootb function in the net/sctp/smstatefuns.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s ASoC kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s ASoC kernel component is related to the assignment of the NULL pointer in the function asocqcomlpasscpuplatformprobe in sound/soc/qcom/lpass-cpu.c. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-55963

An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of...

The vulnerability of the formSetCfm() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Improper Preservation of Consistency Between Independent Representations of Shared State

Overview Affected versions of this package are vulnerable to Improper Preservation of Consistency Between Independent Representations of Shared State which can result in two different OpenFlowNodeIds being assigned to the same SFF by different plugins. An attacker can trigger such a name conflict...

Cloak Ransomware Hits Virginia Attorney General’s Office, Disrupts IT Systems

Cloak ransomware group claims attack on Virginia attorney general's office, demands ransom for stolen data. Investigation underway. Find out the impact and what's being done...

CVE-2025-0188

A Server-Side Request Forgery SSRF vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access th...

CVE-2024-9365

A Cross-Site Request Forgery CSRF vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability...

CVE-2024-8183

A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and...

Regular Expression Denial Of Service (ReDoS)

jsPDF is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to improper input validation due to user-controlled arguments in the addImage, html, and addSvgAsImage methods allowing the use of harmful data URLs, leading to high CPU utilization and service disruption...

The vulnerability of the `bnxt_rdma_aux_device_init()` function in the `driver/net/ethernet/broadcom/bnxt/bnxt_ulp.c` module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the bnxtrdmaauxdeviceinit function in the driver/net/ethernet/broadcom/bnxt/bnxtulp.c file of the Linux kernel is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __vhost_worker_flush() function in the drivers/vhost/vhost.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the vhostworkerflush function in the drivers/vhost/vhost.c module of the Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfs4_set_security_label() function in the fs/nfs/nfs4proc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfs4setsecuritylabel function in the fs/nfs/nfs4proc.c module of the Linux kernel is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __cxl_dpa_to_region() function in the drivers/cxl/core/region.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cxldpatoregion function in the drivers/cxl/core/region.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `nvme_alloc_admin_tag_set()` function in the drivers/nvme/host/core.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmeallocadmintagset function in the drivers/nvme/host/core.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo() function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the send_io_resp_imm() function in the drivers/infiniband/ulp/rtrs/rtrs-srv.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the sendiorespimm function in the drivers/infiniband/ulp/rtrs/rtrs-srv.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ks8851_irq() function in the drivers/net/ethernet/micrel/ks8851_common.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the ks8851irq function in the drivers/net/ethernet/micrel/ks8851common.c file of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...